PT-2024-24602 · Librenms · Librenms

Rook1337 · Published 2024-04-22 · Updated 2025-01-02 · CVE-2024-32479

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 24.4.0

Description The issue is related to improper sanitization on the Service template name, which can lead to stored Cross-site Scripting. This can be exploited by modifying the template name with crafted JavaScript code, allowing an attacker to execute arbitrary code when the delete button is clicked. The vulnerability can lead to cookie stealing or an attacker executing other features using this exploit.

Recommendations For versions prior to 24.4.0, update to version 24.4.0 to fix the vulnerability. As a temporary workaround, consider restricting access to the Service template name field to minimize the risk of exploitation. Additionally, avoid using the Service template name field until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-32479

GHSA-72M9-7C8X-PMMW

Affected Products

Librenms

References · 10

• 🔥 https://github.com/librenms/librenms/security/advisories/GHSA-72m9-7c8x-pmmw · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32479.json · Exploit
• https://github.com/librenms/librenms/commit/19344f0584d4d6d4526fdf331adc60530e3f685b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-32479 · Security Note
• https://osv.dev/vulnerability/GHSA-72m9-7c8x-pmmw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-32479 · Vendor Advisory
• https://github.com/librenms/librenms · Note
• https://github.com/librenms/librenms/blob/a61c11db7e8ef6a437ab55741658be2be7d14d34/app/Http/Controllers/ServiceTemplateController.php#L67C23-L67C23 · Note
• https://t.me/cvenotify/77758 · Telegram Post
• https://t.me/cvenotify/77708 · Telegram Post