CVE-2019-10671

An issue was discovered in LibreNMS through 1.47

published September 9, 2019

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated by the graph.php sort parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01346 · 71.2th percentile
Published
2019-09-09T13:01Z
EPSS history
Timeline
  • 09 SEP 13:01Z
    An issue was discovered in LibreNMS through 1.47
    cvelistv5