Skip to content
OpenAdvisories

Archive

20 November 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.6
    CVE-2022-4068 EPSS 38%

    Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms

    A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low p…