{"action":"Upgrade librenms/librenms to 24.11.0 or later.","affected":[{"fixed":"24.11.0","introduced":"24.9.0"}],"component":"librenms/librenms","cve_ids":["CVE-2024-53457"],"ecosystem":"Packagist","epss":0.464,"exploited":false,"fixed_versions":["24.11.0"],"ghsa_id":"GHSA-6c5q-fg3g-qhhv","id":"tcs_01M5KEWYM0Y3A9WZ0979P85B3E","modified_at":"2024-12-10T22:57:16.504236Z","published_at":"2024-12-06T00:31:46Z","references":["https://osv.dev/vulnerability/GHSA-6c5q-fg3g-qhhv","https://nvd.nist.gov/vuln/detail/CVE-2024-53457","https://github.com/librenms/librenms/commit/afe92dbf4321f107012690d476685603d1ccb013","https://github.com/librenms/librenms","https://github.com/tCu0n9/Stored-XSS-LibreNMS-Display-Name.git"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-6c5q-fg3g-qhhv","url":"https://osv.dev/vulnerability/GHSA-6c5q-fg3g-qhhv"}],"summary":"LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section"}