CVE-2025-62411mediumCWE-79

CVE-2025-62411: medium-severity vulnerability in librenms

Stored XSS in Alert Transport name field in LibreNMS

Published

Follow this CVE+ Monitor librenms+ Monitor librenms/librenms

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 13%
In short

LibreNMS allows administrators to store malicious code in Alert Transport names, which gets executed when viewing the Alert Rules page. This can let attackers steal session cookies or perform actions as the admin.

Technical detail

Stored XSS vulnerability in Alert Transports management where user-supplied Transport name input is reflected without sanitization in the Alert Rules page UI. Requires admin privileges to inject payload; impacts confidentiality and integrity of admin sessions.

Summary generated and translated by AI from the official description.
LibreNMS is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Transports management functionality. When an administrator creates a new Alert Transport, the value of the Transport name field is stored and later rendered in the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitrary JavaScript execution in the admin’s browser. This vulnerability is fixed in 25.10.0.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Affected products
librenms · librenms
Related CVEs — librenms

In the same product, most dangerous first.

CVE-2024-49754HIGHLibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.phpEPSS 73.9%CVE-2024-50352MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.phpEPSS 41.4%CVE-2024-32479HIGHLibreNMS's Improper Sanitization on Service template name leads to Stored XSSEPSS 34.1%CVE-2025-23200MEDIUMStored XSS-LibreNMS-Misc Section in librenmsEPSS 31.6%CVE-2024-47525HIGHStored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.phpEPSS 29.6%CVE-2024-32480HIGHLibreNMS's Time-Based Blind SQL injection leads to database extractionEPSS 20.3%