PT-2024-24604 · Librenms · Librenms

Sco4X0 · Published 2024-04-22 · Updated 2025-01-02 · CVE-2024-32480

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 24.4.0

Description The issue is related to a SQL injection vulnerability. The order parameter, obtained from $request, is directly incorporated into an SQL statement after a string check, resulting in the vulnerability. This allows an attacker to extract the whole database. The vulnerability exists in the api functions.php file, specifically in the list devices function.

Recommendations For versions prior to 24.4.0, update to version 24.4.0 to fix the issue. As a temporary workaround, consider restricting access to the order parameter in the API endpoint until a patch is available. Avoid using the order parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-32480

GHSA-JH57-J3VQ-H438

Affected Products

Librenms

References · 10

• 🔥 https://github.com/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32480.json · Exploit
• https://github.com/librenms/librenms/commit/83fe4b10c440d69a47fe2f8616e290ba2bd3a27c · Patch
• https://osv.dev/vulnerability/GHSA-jh57-j3vq-h438 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-32480 · Security Note
• https://osv.dev/vulnerability/CVE-2024-32480 · Vendor Advisory
• https://github.com/librenms/librenms · Note
• https://t.me/cvenotify/77709 · Telegram Post
• https://t.me/cvenotify/106089 · Telegram Post
• https://t.me/cvenotify/77759 · Telegram Post