Beveiligingsadvies

CVE-2024-47528

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-01 20:20:15

Laatst bijgewerkt 2024-12-19 20:14:51

Toegewezen door GitHub_M

CVSS-score 4.6

Status PUBLISHED

Beschrijving

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting (XSS) can be achieved by uploading a new Background for a Custom Map. Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload which will trigger on load. This led to Stored Cross-Site Scripting (XSS). The vulnerability is fixed in 24.9.0.

← Alle CVE's bekijken Bekijk op cve.org ↗