QwikSec

Security Database

CVE

CWE

Training

CVE-2024-47528

Published: Oct 1, 2024

Modified: Dec 19, 2024

PUBLISHED

Description

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting (XSS) can be achieved by uploading a new Background for a Custom Map. Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload which will trigger on load. This led to Stored Cross-Site Scripting (XSS). The vulnerability is fixed in 24.9.0.

Vendor	Product	Versions
librenms	librenms	affected `< 24.9.0`

Weaknesses (CWE)

References

https://github.com/librenms/librenms/security/advisories/GHSA-x8gm-j36p-fppf

x_refsource_CONFIRM

https://github.com/librenms/librenms/commit/d959bf1b366319eda16e3cd6dfda8a22beb203be

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.