CVE-2022-0580 Incorrect Authorization in librenms/librenms

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0575

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0576

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

CVE-2022-0575

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0576

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

PT-2022-13276 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 22.2.0 Description: The issue is related to improper access control, which can lead to incorrect authorization. This can potentially allow unauthorized access to certain features or data. Recommendations: F...

Librenms 跨站脚本漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validation...

Librenms 访问控制错误漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, automatic discovery of network environments and automatic updates. librenms suffers from an access control error vulnerability, which stems from an improper acce...

Librenms 跨站脚本漏洞

Librenms is an open source network monitoring system based on PHP and MySQL from the Librenms community. The system features customizable alerts, auto-discovery of network environments and automatic updates. librenms There is a cross-site scripting vulnerability , there is no information about th...

CVE-2022-0575 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0575

CVE-2022-0575 corresponds to a stored Cross-site Scripting (XSS) vulnerability in the Librenms project, affecting librenms/librenms prior to version 22.2.0. The available documents consistently state that the issue is a stored XSS in Librenms, without detailing exact exploit vectors, affected mod...

CVE-2022-0575 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0576

CVE-2022-0576 affects librenms/librenms (prior to 22.1.0) with a Cross-site Scripting (XSS) vulnerability arising from insufficient sanitization in the Transport name field in alert-transports.inc.php. The vulnerability is described in connected sources as a generic XSS in the Librenms package, w...

CVE-2022-0576 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

CVE-2022-0576 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

Cross-site Scripting (XSS) - Stored in librenms/librenms

Description Stored XSS in create/modify Transport Groups, Add/Edit Service and Edit Service Template Proof of Concept Payload: ' PoC image: Xss payload in create/modify Transport Groups Xss payload in Add/Edit Service Xss payload in Edit Service Template XSS will fire-up by user visiting: 1...

Improper Authorization in librenms/librenms

Description LibreNMS v22.1.0 allows users with the normal role/level to interact with the plugin setting resulting in the users could take action such as switching on/off any installed plugins which are supposedly accessible by the Administrator only. Proof of Concept Affected endpoints: 1 GET...

Exposure of Sensitive Information to an Unauthorized Actor in librenms/librenms

LibreNMS v22.1.0 allows users with the normal role/level to view/access the alert transport details. The alert transport may expose sensitive information to an actor that is not explicitly authorized to have access to that information which are supposedly accessible by the Administrator only. Pro...

Improper Access Control in librenms/librenms

Description Improper Access Control vulnerability in LibreNMS v22.1.0 allows attackers with the normal role/level to interact with port-groups functionality such as create, edit/modify and delete the existing port group. The port-groups functionality fails to enforce policy such that normal users...