{"action":"Upgrade librenms/librenms to 24.10.0 or later.","affected":[{"fixed":"24.10.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2024-51494"],"ecosystem":"Packagist","epss":0.00431,"exploited":false,"fixed_versions":["24.10.0"],"ghsa_id":"GHSA-7663-37rg-c377","id":"tcs_01M5KEXREG8X3M2ENG4EVE3XS6","modified_at":"2024-11-15T21:10:25.639816Z","published_at":"2024-11-15T15:43:20Z","references":["https://osv.dev/vulnerability/GHSA-7663-37rg-c377","https://github.com/librenms/librenms/security/advisories/GHSA-7663-37rg-c377","https://nvd.nist.gov/vuln/detail/CVE-2024-51494","https://github.com/librenms/librenms/commit/82a744bfe29017b8b58b5752ab9e1b335bedf0a0","https://github.com/librenms/librenms"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7663-37rg-c377","url":"https://osv.dev/vulnerability/GHSA-7663-37rg-c377"}],"summary":"LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php"}