PT-2023-31351

CVE-2023-4979

Published

2023-09-14

Updated

2024-09-20

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions librenms versions prior to 23.9.0

Description The issue is related to Cross-site Scripting (XSS) - Reflected in the GitHub repository librenms/librenms. This type of attack occurs when an application includes user input in its responses without properly validating or encoding the input, allowing an attacker to inject malicious scripts into the application.

Recommendations For versions prior to 23.9.0, update to version 23.9.0 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Hainguyen0207

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers