Listen to this Post
How the CVE Works
The vulnerability occurs in LibreNMS (<= 25.6.0) due to improper input sanitization in the “Template name” field during Alert Template creation. An authenticated admin can inject malicious JavaScript (e.g., <script>alert(document.cookie)</script>), which is stored and executed when the template is rendered. This allows attackers to hijack sessions, steal sensitive data, or perform actions on behalf of other admins.
DailyCVE Form
Platform: LibreNMS
Version: <= 25.6.0
Vulnerability: Stored XSS
Severity: Medium
Date: 2024-06-15
Prediction: Patch by 2024-07-10
What Undercode Say
curl -X POST -d "name=<script>alert(1)</script>" http://localhost:8000/templates grep -r "unsafe_html" /var/www/librenms/
How Exploit
1. Authenticate as admin.
2. Inject XSS payload in template name.
3. Trigger execution via template rendering.
Protection from this CVE
- Update to patched version.
- Sanitize user input.
- Implement CSP headers.
Impact
- Session hijacking.
- Admin account compromise.
- Data exfiltration.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
