CVE-2024-47524

Summary

CVE-2024-47524 is a vulnerability affecting LibreNMS, an open-source network monitoring system. Users with administrative roles can create Device Groups without proper sanitization of user input in the group names. If a JavaScript code snippet is included in the name of a Device Group, it will be executed when the group details are viewed. This issue has been resolved in version 24.9.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.