CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

PT-2022-22923 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 22.10.0 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository librenms/librenms. Recommendations: For versions prior to 22.10.0, update to version 22.10.0 or later to resol...

HTML injection possible via LLDP

Description An unmanaged/foreign neighbouring device that is advertising its presence with LLDP can inject malicious HTML code into LibreNMS by setting its System Name TLV to whatever snippet is to be injected. This is assuming that a device that is managed by LibreNMS has LLDP and the...

Unauthenticated, Stored XSS to RCE via SNMP Trap

Description LibreNMS offers the ability to handle SNMP traps as documented here. One of the SNMP trap handlers called HPFault creates an event with the message "Fault - Unhandled ..." when receiving a trap with an unknown type. The type of this event is set to the received, unknown type, which is...

Deserialization of arbitrary data leads to RCE

Description LibreNMS includes support for monitoring applications, one of which is memcached. When polling for memcached, the data returned by the agent to the LibreNMS server is not verified before it is deserialized. Because LibreNMS has quite a few dependencies, it is easy to find a working...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-81242)

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 22.9.0. An...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to stored cross-site scriptingXSS attacks. The library does not properly escape user inputs inserted through the title parameter in formatItem function, allowing an authenticated attacker to inject and execute malicious javascript on victim's browser...

LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter

LibreNMS versions 22.8.0 and prior allow attackers to execute arbitrary JavaScript code via the Schedule Maintenance Title parameter. A patch is available and anticipated to be part of version 22.9.0...

GHSA-3JH2-WMV7-M932 LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter

LibreNMS versions 22.8.0 and prior allow attackers to execute arbitrary JavaScript code via the Schedule Maintenance Title parameter. A patch is available and anticipated to be part of version 22.9.0...

CVE-2022-3231

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

CVE-2022-3231

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

CVE-2022-3231

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

CVE-2022-3231 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

CVE-2022-3231

CVE-2022-3231 is a stored XSS in LibreNMS prior to 22.9.0. The issue affects LibreNMS where the Schedule Maintenance Title parameter can inject arbitrary JavaScript, enabling XSS in users’ browsers. A patch/mitigation is expected in or around version 22.9.0; remediation is to upgrade to 22.9.0+ (...

CVE-2022-3231 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

CVE-2022-3231: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 22.9.0. An...

PT-2022-21221

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 22.9.0 Description The issue is related to Cross-site Scripting XSS - Stored, which allows attackers to execute arbitrary JavaScript code. Specifically, the Title parameter in the Schedule Maintenance feature is...

Stored Cross-Site Scripting (XSS) on Schedule Maintenance "Title" parameter

Description Stored Cross-Site Scripting XSS vulnerability in LibreNMS v22.8.0 allows attackers to execute arbitrary javascript code in the browser affected from function of "Schedule Maintenance" in "Title" parameter. Proof of Concept 1 - Click "Alerts" Click "Schedule Maintenance" from the...