CVE-2022-3231
1 advisory.
Packagist/librenms/librenms CVE-2022-3231: medium 5.4
LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter
Action: Upgrade librenms/librenms to 22.9.0 or later.
composer require librenms/librenms:22.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.9.0 | - |
Fixed versions
| 22.9.0 |
Sources
- osv: GHSA-3jh2-wmv7-m932
- https://nvd.nist.gov/vuln/detail/CVE-2022-3231
- https://github.com/librenms/librenms/pull/14360
- https://github.com/librenms/librenms/commit/08050020861230ff96a6507b309cc172a9e70af8
- https://github.com/librenms/librenms
- https://huntr.dev/bounties/bcb6ee68-1452-4fdb-932a-f1031d10984f
CVE-2022-3231 · published · modified · JSON