Packagist/librenms/librenms CVE-2019-12463: high 8.8, EPSS 1.39%
Improper Encoding or Escaping of Output and Injection in LibreNMS
Action: Upgrade librenms/librenms to 1.53 or later.
composer require librenms/librenms:1.53Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.50.1 | 1.53 | - |
Fixed versions
| 1.53 |
Sources
- osv: GHSA-w5r2-gvgf-mpm8
- https://nvd.nist.gov/vuln/detail/CVE-2019-12463
- https://www.darkmatter.ae/xen1thlabs/librenms-rrdtool-injection-vulnerability-xl-19-022
CVE-2019-12463 · published · modified · JSON