~ / search / GHSA-325v-g5vx-whxc

GHSA-325v-g5vx-whxc

LibreNMS vulnerable to Cross-Site Scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-36746

Packages

EcosystemPackageAffectedFixed in
Packagist librenms/librenms < 22.7.0 22.7.0

Details

As written in the advisory (Markdown source, shown as plain text).

LibreNMS version 22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.

References

External links from the advisory. They lead to third-party sites.