CVE-2023-4347CWE-79

Cross-site Scripting (XSS) - Reflected in librenms/librenms

High · published August 15, 2023

Patch now

High probability of exploitation

CVSS calls it high at 7.6. It sits in the 99.4th percentile for exploit probability.

CVSS v3.0

7.6

EPSS

70%

Percentile

99.4

In the wild

Unconfirmed

What it is

Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.

The record

Technical detail

CVSS v3.0: 7.6 · HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0: Not supplied
EPSS: 0.69707 · 99.4th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2023-08-15T00:00Z

EPSS history

Timeline

15 AUG 00:00Z
Cross-site Scripting (XSS) - Reflected in librenms/librenms
cvelistv5