Cross-site Scripting in librenms/librenms

A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...

Cross-site Scripting in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

GHSA-P55M-G4M3-QMRP Cross-site Scripting in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-4070

Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-4069

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3561

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3562

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-4067

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3525

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3516

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

Deserialization of untrusted data

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

Session fixation

Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

LibreNMS 跨站脚本漏洞

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from the presence of...

CVE-2022-3516

CVE-2022-3516 affects LibreNMS installations with versions prior to 22.10.0. The issue is a stored Cross-site Scripting (XSS) vulnerability in the project’s web-facing components, allowing an attacker to inject and persist malicious script that can execute in an authenticated user’s browser after...

LibreNMS 代码问题漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...

CVE-2022-3525 Deserialization of Untrusted Data in librenms/librenms

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3561

CVE-2022-3561 is a Cross-site Scripting (XSS) vulnerability affecting LibreNMS (librenms/librenms) prior to version 22.10.0. The issue is described as a generic XSS vulnerability in the Librenms codebase (no vendor-specific details beyond the Librenms repository). Affected versions are prior to 2...