CVE-2024-32479CWE-79

LibreNMS's Improper Sanitization on Service template name leads to Stored XSS

High · published April 22, 2024

CVSS v3.1
7.1
EPSS
34%
Percentile
98.4
In the wild
Unconfirmed
What it is

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to version 24.4.0, there is improper sanitization on the `Service` template name, which can lead to stored Cross-site Scripting. Version 24.4.0 fixes this vulnerability.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.34128 · 98.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-04-22T22:07Z
EPSS history
Timeline
  • 22 APR 22:07Z
    LibreNMS's Improper Sanitization on Service template name leads to Stored XSS
    cvelistv5