Tcu0N9

An authenticated administrator can achieve remote code execution via the `AboutController`. The issue occurs because the `snmpget` configuration parameter is passed to the `shell exec()` function without proper validation. An attacker can modify the `snmpget` configuration to point to a malicious executable and trigger its execution by accessing the '/about' endpoint.

The Form Node contains cross-site scripting (XSS) and open redirect issues caused by unsanitized HTML description fields and overly permissive iframe sandbox policies. Authenticated users with workflow creation permissions can inject malicious scripts or redirect parameters to execute stored XSS attacks or phishing redirects targeting end users.

The issue is a stored XSS that affects the parameters of the `/device/$DEVICE ID/edit` endpoint, specifically the `display` parameter. This allows remote attackers to inject malicious scripts, which execute when a user views or interacts with the page displaying the data, potentially leading to unauthorized actions or data exposure.

The issue is a stored XSS that affects the parameter: `ajax form.php` -> param: `state`. This allows remote attackers to inject malicious scripts, which execute immediately when a user views or interacts with the page displaying the data, potentially leading to unauthorized actions or data exposure.

The issue concerns Cross-site Scripting (XSS) in the `/addhost` API endpoint, specifically in the `community` parameter. This allows remote attackers to inject malicious scripts, which execute when a user views or interacts with the page displaying the data. The malicious script can lead to potential unauthorized actions or data exposure. The issue has been addressed in release version 24.11.0.

The issue is related to a stored XSS vulnerability in the parameter: `/ajax form.php` -> param: `descr`. This allows remote attackers to inject malicious scripts, which execute immediately when a user views or interacts with the page displaying the data, potentially leading to unauthorized actions or data exposure.

The issue concerns a stored XSS vulnerability in the parameters of the `/device/$DEVICE ID/edit` endpoint, specifically the `display` parameter. This allows remote attackers to inject malicious scripts, which execute when a user views or interacts with the page displaying the data. The vulnerability can lead to potential unauthorized actions or data exposure.

The issue is related to a reflected cross-site scripting vulnerability in the `Referer` HTTP header. This vulnerability allows attackers to inject arbitrary JavaScript code, which is reflected in the HTML response without proper sanitization. When crafted malicious input is provided in the `Referer` header, it is echoed back into an HTML attribute in the application’s response. The vulnerability is present in the `/lgsl files/lgsl list.php` endpoint, specifically in the lines where the `$uri` variable is set based on the `HTTP REFERER` header.

A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `Display Name` parameter. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks.