CVE-2025-65013CWE-79cross-site-scripting

CVE-2025-65013

Medium · published November 19, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
18.5
In the wild
Unconfirmed
What it is

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a reflected cross-site scripting (XSS) vulnerability was identified in the LibreNMS application at the /maps/nodeimage endpoint. The Image Name parameter is reflected in the HTTP response without proper output encoding or sanitization, allowing an attacker to craft a URL that, when visited by a victim, causes arbitrary JavaScript execution in the victim’s browser. This issue has been patched in version 25.11.0.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-11-19T04:15Z
Affected products (1)
ProductVersionsFixed in
librenms/librenms< 25.11.025.11.0
References (2)
https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x · [email protected]https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 18 NOV 23:01Z
    LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
    cvelistv5