PT-2022-23598

CVE-2022-36745

Published

2022-08-30

Updated

2022-09-01

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LibreNMS version 22.6.0

Description The issue is a cross-site scripting (XSS) vulnerability. It was discovered in the component print-customoid.php.

Recommendations For LibreNMS version 22.6.0, update to a version that fixes the XSS vulnerability in the print-customoid.php component. As a temporary workaround, consider restricting access to the print-customoid.php component to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Enferas

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers

CVE-2022-36745