CVE-2019-15230

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin…

published August 28, 2019

CVSS
—
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.3th percentile
Published
2019-08-28T16:32Z
EPSS history
Timeline
  • 28 AUG 16:32Z
    LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin…
    cvelistv5