PT-2022-23598

CVE-2022-36745

تاريخ النشر

2022-08-30

تاريخ التحديث

2022-09-01

الوصف من

CVSS 3.1

6.1

متوسطة

المقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LibreNMS version 22.6.0

Description The issue is a cross-site scripting (XSS) vulnerability. It was discovered in the component print-customoid.php.

Recommendations For LibreNMS version 22.6.0, update to a version that fixes the XSS vulnerability in the print-customoid.php component. As a temporary workaround, consider restricting access to the print-customoid.php component to minimize the risk of exploitation.

قابلية الاستغلال

استغلال

إصلاح

التأثيرات

الباحثون

Enferas

المورّدون

المنتجات المتأثرة

تصنيف نقاط الضعف

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

المعرّفات ذات الصلة

CVE-2022-36745