Beveiligingsadvies

CVE-2024-49764

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-15 15:27:52

Laatst bijgewerkt 2024-11-15 16:50:01

Toegewezen door GitHub_M

CVSS-score 4.8

Status PUBLISHED

Beschrijving

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the "hostname" parameter when creating a new device. This vulnerability results in the execution of malicious code when the "Capture Debug Information" page is visited, redirecting the user and sending non-httponly cookies to an attacker-controlled domain. This vulnerability is fixed in 24.10.0.

← Alle CVE's bekijken Bekijk op cve.org ↗