Vulnerability · Published Nov 15, 2024 · Assigned by GitHub_M

CVE-2024-49759LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php

Medium 4.8

In plain English

A medium-severity cross-site scripting in librenms from librenms. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.8Medium

Exploit odds (30 days)0.4%top 61.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Manage User Access" page allows authenticated users to inject arbitrary JavaScript through the "bill_name" parameter when creating a new bill. This vulnerability can lead to the execution of malicious code when visiting the "Bill Access" dropdown in the user's "Manage Access" page, potentially compromising user sessions and allowing unauthorized actions. This vulnerability is fixed in 24.10.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	librenms/librenms	24.10.0	GHSA-888j-pjqh-fx58

Affected products (as reported)

Vendor	Product	Versions
librenms	librenms	< 24.10.0

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

References

https://github.com/librenms/librenms/security/advisories/GHSA-888j-pjqh-fx58 x_refsource_CONFIRM
https://github.com/librenms/librenms/commit/237f4d2e818170171dfad6efad36a275cd2ba8d0 x_refsource_MISC