Description
LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog program fields that executes when authenticated users view affected pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| librenms | librenms | < 26.3.1 | 26.3.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | librenms/librenms | < 26.5.0 | 26.5.0 | GHSA-7w8c-qgxg-m7jx |
References
- GitHub Security Advisory (GHSA-7w8c-qgxg-m7jx) vendor-advisory
- VulnCheck Advisory: LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data third-party-advisory