Skip to content
OpenAdvisories

Vendor

The OpenNMS Group

25 known vulnerabilities.

Products

Meridian 24 Horizon 23
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40315 Public exploit

    ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

    In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. The solution is to upgrade to Meridian 2023.1.5 or Hor…

    The OpenNMS Group Meridian Horizon org.opennms:opennms-webapp-rest Maven