CVE-2020-35700

A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote…

published February 8, 2021

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02340 · 83.5th percentile
Published
2021-02-08T08:08Z
EPSS history
Timeline
  • 08 FEB 08:08Z
    A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote…
    cvelistv5