CVE-2022-0588

The CVE-2022-0588 entry refers to an information-disclosure vulnerability in librenms/librenms due to Missing Authorization prior to version 22.2.0. Multiple connected sources (Red Hat, OSV, CNVD, GHSA advisories, and PT-2022-13283) confirm that unauthorised access could expose sensitive informat...

CVE-2022-0588 Missing Authorization in librenms/librenms

Missing Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0588 Missing Authorization in librenms/librenms

Missing Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587 Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...

CVE-2022-0587 Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scriptingXSS attacks. The vulnerability exists due to the lack of sanitization in the Transport name field in the alert-transports.inc.php file allowing an attacker to inject and execute malicious javascript through the alerts module...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in addhost.inc.php in sysName, Hardware and Community fields which allows an attacker to send and execute arbitrary javascript...

Cross-site Scripting in librenms

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

Cross-site Scripting in librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

GHSA-HXMR-5GV9-6P8V Cross-site Scripting in librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

GHSA-RP34-85X3-3764 Cross-site Scripting in librenms

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

PT-2022-13283 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 22.2.0 Description: The issue concerns exposure of sensitive information to unauthorized actors due to missing authorization. Recommendations: For versions prior to 22.2.0, update to version 22.2.0 or later...

Librenms 授权问题漏洞

Librenms is an open source network monitoring system based on PHP and MySQL from the Librenms community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. An authorization issue vulnerability exists in librenms that stems from improper...

Librenms 信息泄露漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from an information disclosure vulnerability that stems from allowing users with...

Librenms 跨站脚本漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validatio...

CVE-2022-0580

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0580

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

Authorization

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0580

CVE-2022-0580 corresponds to an improper access control/incorrect authorization issue in the Librenms project. Multiple connected sources (e.g., Red Hat, GHSA, OSV) describe it as affecting librenms/librenms prior to version 22.2.0, caused by an authorization flaw that could enable access to feat...