CVE-2024-53457

Packagist/librenms/librenms CVE-2024-53457: medium 5.4

LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section

Action: Upgrade librenms/librenms to 24.11.0 or later.

composer require librenms/librenms:24.11.0

Affected

Fixed versions

Sources

• osv: GHSA-6c5q-fg3g-qhhv
• https://nvd.nist.gov/vuln/detail/CVE-2024-53457
• https://github.com/librenms/librenms/commit/afe92dbf4321f107012690d476685603d1ccb013
• https://github.com/librenms/librenms
• https://github.com/tCu0n9/Stored-XSS-LibreNMS-Display-Name.git

CVE-2024-53457 · published 2024-12-06T00:31:46Z · modified 2024-12-10T22:57:16.504236Z · JSON