CVE-2024-50355

CVSS 3.1 Score 4.8 of 10 (medium)

Details

Published Nov 15, 2024

CWE ID 79

Summary

CVE-2024-50355 is a vulnerability affecting LibreNMS, an open-source network monitoring system. This issue allows users with admin roles to manipulate the display name of devices, introducing a security risk. The application fails to sanitize user input in device display names, potentially allowing the execution of JavaScript code. This vulnerability can be exploited from various sources and was fixed in version 24.10.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

LibreNMS

Affected Vendors

LibreNMS

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/zv5Oya
https://www.cve.org/CVERecord?id=CVE-2024-50355
https://nvd.nist.gov/vuln/detail/CVE-2024-50355

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners