CVE-2024-51497

Summary

CVE-2024-51497 is a stored Cross-Site Scripting (XSS) vulnerability affecting LibreNMS, an open-source network monitoring system. Authenticated users can exploit this issue by injecting malicious JavaScript code through the "unit" parameter when creating a new Object Identifier (OID) in the "Custom OID" tab of a device. This vulnerability allows the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and enabling unauthorized actions. LibreNMS has released version 24.10.0 to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.