CVE-2024-47527

Summary

CVE-2024-47527 is a stored Cross-Site Scripting (XSS) vulnerability affecting LibreNMS, an open-source network monitoring system. The flaw lies in the "Device Dependencies" feature, allowing authenticated users to inject malicious JavaScript code through the device name or "hostname" parameter. By exploiting this vulnerability, attackers can execute malicious scripts in the context of other users' sessions, potentially compromising their accounts and enabling unauthorized actions. This issue has been addressed in the latest version 24.9.0 of LibreNMS.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.