1336 matches found
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4982 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4982 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4982
CVE-2023-4982 is a stored XSS in librenms/librenms prior to 23.9.0. The vulnerability arises from insufficient sanitization/escaping of HTML characters, notably in includes/html/pages/search/fdb.inc.php (per Veracode). Exploitation can lead to cookie theft or user account compromise, or redirecti...
CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4981
CVE-2023-4981 describes a DOM-based Cross-site Scripting (XSS) vulnerability in the LibreNMS project. The issue affects the web UI of LibreNMS installations using the repository version prior to 23.9.0 (librenms/librenms). The root cause is a DOM-related XSS condition that can allow an attacker t...
CVE-2023-4980
LibreNMS (librenms/librenms) has a generic Cross-site Scripting (XSS) vulnerability affecting versions prior to 23.9.0. Root cause details are not fully specified in the provided documents. Impact is described as XSS; no in-the-wild exploit details are given. Remediation: upgrade to version 23.9....
CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4979 Cross-site Scripting (XSS) - Reflected in librenms/librenms
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4978
LibreNMS (librenms/librenms) suffers a DOM-based XSS vulnerability in versions prior to 23.9.0. Reported across multiple sources (CVE-2023-4978) with surrounding references, the issue occurs in the frontend when unsanitized user input is reflected in the DOM. Impact is described as cross-site scr...
CVE-2023-4977
CVE-2023-4977 describes a code injection vulnerability in the LibreNMS project (librenms/librenms) prior to version 23.9.0. The root cause is insufficient sanitization in the search functionality (notably in search.inc.php), which can allow code injection/HTML injection. Multiple connected source...
CVE-2023-4977 Code Injection in librenms/librenms
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4979 Cross-site Scripting (XSS) - Reflected in librenms/librenms
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...