CVE-2024-47527
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-47527 identifies a Stored Cross-Site Scripting (XSS) vulnerability in the Device Dependencies feature of LibreNMS, an open-source network monitoring system. This vulnerability allows authenticated users to inject arbitrary JavaScript via the hostname parameter, potentially compromising other users' accounts and enabling unauthorized actions. Affected products include various versions of LibreNMS, which require remediation by upgrading to version 24.9.0 or later to mitigate the risk. With a CVSS base score of 7.5, this vulnerability poses a high confidentiality impact while requiring high privileges and user interaction to exploit. Organizations using vulnerable versions of LibreNMS are advised to apply the necessary updates promptly to safeguard against this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions