Description
LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization. Attackers controlling a monitored network device can inject arbitrary JavaScript through SNMP responses that executes in the browser of any user viewing VRF-related pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| librenms | librenms | < 26.5.0 | 26.5.0 |
References
- GitHub Security Advisory (GHSA-g993-wffj-m3gv) vendor-advisory
- VulnCheck Advisory: LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields third-party-advisory