Vulnerability · Published Apr 22, 2024 · Assigned by GitHub_M

CVE-2024-32461LibreNMS vulnerable to time-based SQL injection that leads to database extraction

High 7.1

In plain English

A high-severity SQL injection in librenms from librenms. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 19.1% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)19.1%top 2.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injection vulnerability in POST /search/search=packages in LibreNMS prior to version 24.4.0 allows a user with global read privileges to execute SQL commands via the package parameter. With this vulnerability, an attacker can exploit a SQL injection time based vulnerability to extract all data from the database, such as administrator credentials. Version 24.4.0 contains a patch for the vulnerability.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	librenms/librenms	24.4.0	GHSA-cwx6-cx7x-4q34

Affected products (as reported)

Vendor	Product	Versions
librenms	librenms	< 24.4.0

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

References

https://github.com/librenms/librenms/security/advisories/GHSA-cwx6-cx7x-4q34 x_refsource_CONFIRM
https://github.com/librenms/librenms/commit/d29201fce134347f891102699fbde7070debee33 x_refsource_MISC
https://doc.clickup.com/9013166444/p/h/8ckm0bc-53/16811991bb5fff6 x_refsource_MISC