CVE-2024-47527

Summary

CVE-2024-47527 identifies a Stored Cross-Site Scripting (XSS) vulnerability in the Device Dependencies feature of LibreNMS, an open-source network monitoring system. This vulnerability allows authenticated users to inject arbitrary JavaScript via the hostname parameter, potentially compromising other users' accounts and enabling unauthorized actions. Affected products include various versions of LibreNMS, which require remediation by upgrading to version 24.9.0 or later to mitigate the risk. With a CVSS base score of 7.5, this vulnerability poses a high confidentiality impact while requiring high privileges and user interaction to exploit. Organizations using vulnerable versions of LibreNMS are advised to apply the necessary updates promptly to safeguard against this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.