CVE-2024-53457

Summary

CVE-2024-53457 is a stored cross-site scripting (XSS) vulnerability affecting LibreNMS versions 24.9.0 to 24.10.0. This issue allows attackers to inject malicious web scripts or HTML into the Display Name parameter in the Device Settings section. Successful exploitation can result in unintended execution of arbitrary code in users' web browsers, potentially leading to data theft or account takeover. This vulnerability poses a serious risk and requires immediate patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.