CVE-2024-47525highCWE-79

CVE-2024-47525: high-severity vulnerability in librenms

Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php

Published · Updated

Follow this CVE+ Monitor librenms+ Monitor librenms/librenms

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 30%
In short

LibreNMS allows attackers to inject malicious code into alert rule titles, which then executes when other users view those rules. This can compromise user accounts and enable unauthorized actions.

Technical detail

Stored XSS vulnerability in the Alert Rules feature via the Title field, exploitable by authenticated users. The unsanitized input is stored and reflected in users' browser sessions, enabling session hijacking and privilege escalation. Fixed in version 24.9.0.

Summary generated and translated by AI from the official description.
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert Rules" feature allows authenticated users to inject arbitrary JavaScript through the "Title" field. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions. This vulnerability is fixed in 24.9.0.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L
Affected products
librenms · librenms
Related CVEs — librenms

In the same product, most dangerous first.

CVE-2024-49754HIGHLibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.phpEPSS 73.9%CVE-2025-23200MEDIUMStored XSS-LibreNMS-Misc Section in librenmsEPSS 49.3%CVE-2024-50352MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.phpEPSS 41.4%CVE-2024-32479HIGHLibreNMS's Improper Sanitization on Service template name leads to Stored XSSEPSS 34.1%CVE-2024-32480HIGHLibreNMS's Time-Based Blind SQL injection leads to database extractionEPSS 20.3%CVE-2024-32461HIGHLibreNMS vulnerable to time-based SQL injection that leads to database extractionEPSS 19.1%