PT-2024-34160 · Librenms · Librenms

Raphaelcss + 1 · Published 2024-11-15 · Updated 2024-11-18 · CVE-2024-50351

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.10.0

Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the section parameter of the logs tab of a device allows attackers to inject arbitrary JavaScript. This vulnerability results in the execution of malicious code when a user accesses the page with a malicious section parameter, potentially compromising their session and enabling unauthorized actions. The issue arises from a lack of sanitization in the report this() function. The vulnerability allows attackers to execute arbitrary JavaScript in the context of a user’s session by crafting a malicious URL, which could lead to session hijacking, unauthorized actions, or further exploitation by injecting malicious scripts.

Recommendations: For versions prior to 24.10.0, update to version 24.10.0 to fix the vulnerability. As a temporary workaround, consider restricting access to the logs tab or disabling the report this() function until a patch is available. Avoid using the section parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-50351

GHSA-V7W9-63XH-6R3W

Affected Products

Librenms

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50351.json · Exploit
• https://github.com/librenms/librenms/security/advisories/GHSA-v7w9-63xh-6r3w · Vendor Advisory
• https://github.com/librenms/librenms/commit/6a14a9bd767c6e452e4df77a24126c3eeb93dcbf · Patch
• https://osv.dev/vulnerability/CVE-2024-50351 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v7w9-63xh-6r3w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50351 · Security Note
• https://github.com/librenms/librenms · Note
• https://twitter.com/CVEnew/status/1857458737235046501 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857504758908502440 · Twitter Post