CVE-2024-47526

CVSS 3.1 Score 2.4 of 10 (low)

Details

Published Oct 1, 2024

Updated: Dec 19, 2024

CWE ID 79

Summary

CVE-2024-47526 is a newly disclosed vulnerability affecting LibreNMS, an open-source network monitoring system. The issue involves a Self Cross-Site Scripting (Self-XSS) flaw in the "Alert Templates" feature. This vulnerability allows users to inject malicious JavaScript code into the alert template name. Once submitted, the script runs immediately but does not persist after a page refresh. Despite not being permanently stored, this security weakness could still result in unintended site behavior or data exposure for affected users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

LibreNMS

Affected Vendors

LibreNMS

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/y_DUD1
https://www.cve.org/CVERecord?id=CVE-2024-47526
https://nvd.nist.gov/vuln/detail/CVE-2024-47526

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners