CVE-2025-47931 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the `…
Low CVSS: 2.1

CVE-2025-47931

LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the `group name` parameter of the `http://localhost/poller/groups` form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. LibreNMS v25.5.0 contains a patch for the issue.
Vendor
Librenms
Product
Librenms
CWE
CWE-79
Yayın Tarihi
2025-05-17 16:15:19
Güncelleme
2025-05-28 13:19:14
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Librenms LOW Librenms 2025

Referanslar

https://github.com/librenms/librenms/blob/25.4.0/includes/html/pages/addhost.inc.php#L284 https://github.com/librenms/librenms/commit/88fe1a7abdb500d9a2d4c45f9872df54c9ff8062 https://github.com/librenms/librenms/pull/17603 https://github.com/librenms/librenms/security/advisories/GHSA-hxw5-9cc5-cmw5