PT-2024-33674 · Librenms · Librenms

Raphaelcss + 1 · Published 2024-11-15 · Updated 2024-11-20 · CVE-2024-49764

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.10.0

Description: A Stored Cross-Site Scripting (XSS) vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the hostname parameter when creating a new device. This results in the execution of malicious code when the "Capture Debug Information" page is visited, redirecting the user and sending non-httponly cookies to an attacker-controlled domain.

Recommendations: For versions prior to 24.10.0, update to version 24.10.0 to fix the vulnerability. As a temporary workaround, consider restricting access to the "Capture Debug Information" page to minimize the risk of exploitation. Avoid using the hostname parameter in the affected page until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-49764

GHSA-RMR4-X6C9-JC68

Affected Products

Librenms

References · 11

• 🔥 https://github.com/librenms/librenms/security/advisories/GHSA-rmr4-x6c9-jc68 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49764.json · Exploit
• https://github.com/librenms/librenms/commit/af15eabbb1752985d36f337cecf137a947e170f6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-49764 · Security Note
• https://osv.dev/vulnerability/CVE-2024-49764 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rmr4-x6c9-jc68 · Vendor Advisory
• https://github.com/librenms/librenms · Note
• https://twitter.com/CVEnew/status/1857448656800010689 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857502198894108919 · Twitter Post
• https://t.me/cvedetector/11108 · Telegram Post
• https://t.me/cvenotify/102281 · Telegram Post