{"action":"Upgrade librenms/librenms to 24.10.0 or later.","affected":[{"fixed":"24.10.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2024-49758"],"ecosystem":"Packagist","epss":0.00361,"exploited":false,"fixed_versions":["24.10.0"],"ghsa_id":"GHSA-c86q-rj37-8f85","id":"tcs_01M5KF0R41G7P7G6DNAWXZ256H","modified_at":"2024-11-15T21:10:02.363558Z","published_at":"2024-11-15T15:17:33Z","references":["https://osv.dev/vulnerability/GHSA-c86q-rj37-8f85","https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85","https://nvd.nist.gov/vuln/detail/CVE-2024-49758","https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8","https://github.com/librenms/librenms"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-c86q-rj37-8f85","url":"https://osv.dev/vulnerability/GHSA-c86q-rj37-8f85"}],"summary":"LibreNMS has a stored XSS in ExamplePlugin with Device's Notes"}