{"action":"Upgrade librenms/librenms to 23.11.0 or later.","affected":[{"fixed":"23.11.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2023-48295"],"ecosystem":"Packagist","epss":0.00562,"exploited":false,"fixed_versions":["23.11.0"],"ghsa_id":"GHSA-8phr-637g-pxrg","id":"tcs_01M5KEZ77AJV54MCGQRJGKDPZT","modified_at":"2024-02-16T08:19:35.423249Z","published_at":"2023-11-17T21:51:24Z","references":["https://osv.dev/vulnerability/GHSA-8phr-637g-pxrg","https://github.com/librenms/librenms/security/advisories/GHSA-8phr-637g-pxrg","https://nvd.nist.gov/vuln/detail/CVE-2023-48295","https://github.com/librenms/librenms/commit/faf66035ea1f4c1c4f34559b9d0ed40ee4a19f90","https://github.com/librenms/librenms","https://github.com/librenms/librenms/blob/63eeeb71722237d1461a37bb6da99fda25e02c91/app/Http/Controllers/DeviceGroupController.php#L173C21-L173C21"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-8phr-637g-pxrg","url":"https://osv.dev/vulnerability/GHSA-8phr-637g-pxrg"}],"summary":"LibreNMS Cross-site Scripting at Device groups Deletion feature"}