CVE-2022-0575

Summary

Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.dev/bounties/13951f51-deed-4a3d-8275-52306cc5a87d
• https://github.com/librenms/librenms/commit/4f86915866703e2fcd1e34b3fc1181ec2ad78e54
• https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html

References

• https://huntr.dev/bounties/13951f51-deed-4a3d-8275-52306cc5a87d
• https://github.com/librenms/librenms/commit/4f86915866703e2fcd1e34b3fc1181ec2ad78e54
• https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html

• ←Previous
• Next→