~ / search / GHSA-g5r6-vrmx-9gwj

GHSA-g5r6-vrmx-9gwj

LibreNMS SQL Injection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-15873

Packages

EcosystemPackageAffectedFixed in
Packagist librenms/librenms < 1.65.1 1.65.1

Details

As written in the advisory (Markdown source, shown as plain text).

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.

References

External links from the advisory. They lead to third-party sites.