CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-49754

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the API-Access page allows authenticated users to inject arbitrary JavaScript through the "token" parameter when creating a new API token. This vulnerability can result in the execution of malicious code in the context of other users' sessions, compromising their accounts and enabling unauthorized actions. This vulnerability is fixed in 24.10.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.4%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2024-49754

Librenms » Librenms » Version: N/A

cpe:2.3:a:librenms:librenms:-
Librenms » Librenms » Version: 0.1

cpe:2.3:a:librenms:librenms:0.1
Librenms » Librenms » Version: 1.19

cpe:2.3:a:librenms:librenms:1.19
Librenms » Librenms » Version: 1.20

cpe:2.3:a:librenms:librenms:1.20
Librenms » Librenms » Version: 1.20.1

cpe:2.3:a:librenms:librenms:1.20.1
Librenms » Librenms » Version: 1.21

cpe:2.3:a:librenms:librenms:1.21
Librenms » Librenms » Version: 1.22

cpe:2.3:a:librenms:librenms:1.22
Librenms » Librenms » Version: 1.22.01

cpe:2.3:a:librenms:librenms:1.22.01
Librenms » Librenms » Version: 1.23

cpe:2.3:a:librenms:librenms:1.23
Librenms » Librenms » Version: 1.24

cpe:2.3:a:librenms:librenms:1.24
Librenms » Librenms » Version: 1.25

cpe:2.3:a:librenms:librenms:1.25
Librenms » Librenms » Version: 1.26

cpe:2.3:a:librenms:librenms:1.26
Librenms » Librenms » Version: 1.27

cpe:2.3:a:librenms:librenms:1.27
Librenms » Librenms » Version: 1.28

cpe:2.3:a:librenms:librenms:1.28
Librenms » Librenms » Version: 1.29

cpe:2.3:a:librenms:librenms:1.29
Librenms » Librenms » Version: 1.30

cpe:2.3:a:librenms:librenms:1.30
Librenms » Librenms » Version: 1.30.01

cpe:2.3:a:librenms:librenms:1.30.01
Librenms » Librenms » Version: 1.31

cpe:2.3:a:librenms:librenms:1.31
Librenms » Librenms » Version: 1.31.01

cpe:2.3:a:librenms:librenms:1.31.01
Librenms » Librenms » Version: 1.31.02

cpe:2.3:a:librenms:librenms:1.31.02
Librenms » Librenms » Version: 1.31.03

cpe:2.3:a:librenms:librenms:1.31.03
Librenms » Librenms » Version: 1.32

cpe:2.3:a:librenms:librenms:1.32
Librenms » Librenms » Version: 1.32.01

cpe:2.3:a:librenms:librenms:1.32.01
Librenms » Librenms » Version: 1.33

cpe:2.3:a:librenms:librenms:1.33
Librenms » Librenms » Version: 1.33.01

cpe:2.3:a:librenms:librenms:1.33.01
Librenms » Librenms » Version: 1.34

cpe:2.3:a:librenms:librenms:1.34
Librenms » Librenms » Version: 1.35

cpe:2.3:a:librenms:librenms:1.35
Librenms » Librenms » Version: 1.36

cpe:2.3:a:librenms:librenms:1.36
Librenms » Librenms » Version: 1.36.01

cpe:2.3:a:librenms:librenms:1.36.01
Librenms » Librenms » Version: 1.37

cpe:2.3:a:librenms:librenms:1.37
Librenms » Librenms » Version: 1.38

cpe:2.3:a:librenms:librenms:1.38
Librenms » Librenms » Version: 1.39

cpe:2.3:a:librenms:librenms:1.39
Librenms » Librenms » Version: 1.40

cpe:2.3:a:librenms:librenms:1.40
Librenms » Librenms » Version: 1.41

cpe:2.3:a:librenms:librenms:1.41
Librenms » Librenms » Version: 1.42

cpe:2.3:a:librenms:librenms:1.42
Librenms » Librenms » Version: 1.42.01

cpe:2.3:a:librenms:librenms:1.42.01
Librenms » Librenms » Version: 1.43

cpe:2.3:a:librenms:librenms:1.43
Librenms » Librenms » Version: 1.44

cpe:2.3:a:librenms:librenms:1.44
Librenms » Librenms » Version: 1.45

cpe:2.3:a:librenms:librenms:1.45
Librenms » Librenms » Version: 1.46

cpe:2.3:a:librenms:librenms:1.46
Librenms » Librenms » Version: 1.47

cpe:2.3:a:librenms:librenms:1.47
Librenms » Librenms » Version: 1.48

cpe:2.3:a:librenms:librenms:1.48
Librenms » Librenms » Version: 1.48.1

cpe:2.3:a:librenms:librenms:1.48.1
Librenms » Librenms » Version: 1.49

cpe:2.3:a:librenms:librenms:1.49
Librenms » Librenms » Version: 1.50

cpe:2.3:a:librenms:librenms:1.50
Librenms » Librenms » Version: 1.50.1

cpe:2.3:a:librenms:librenms:1.50.1
Librenms » Librenms » Version: 1.51

cpe:2.3:a:librenms:librenms:1.51
Librenms » Librenms » Version: 1.52

cpe:2.3:a:librenms:librenms:1.52
Librenms » Librenms » Version: 1.53

cpe:2.3:a:librenms:librenms:1.53
Librenms » Librenms » Version: 1.53.1

cpe:2.3:a:librenms:librenms:1.53.1
Librenms » Librenms » Version: 1.54

cpe:2.3:a:librenms:librenms:1.54
Librenms » Librenms » Version: 1.55

cpe:2.3:a:librenms:librenms:1.55
Librenms » Librenms » Version: 1.56

cpe:2.3:a:librenms:librenms:1.56
Librenms » Librenms » Version: 1.57

cpe:2.3:a:librenms:librenms:1.57
Librenms » Librenms » Version: 1.58

cpe:2.3:a:librenms:librenms:1.58
Librenms » Librenms » Version: 1.58.1

cpe:2.3:a:librenms:librenms:1.58.1
Librenms » Librenms » Version: 1.59

cpe:2.3:a:librenms:librenms:1.59
Librenms » Librenms » Version: 1.60

cpe:2.3:a:librenms:librenms:1.60
Librenms » Librenms » Version: 1.61

cpe:2.3:a:librenms:librenms:1.61
Librenms » Librenms » Version: 1.62

cpe:2.3:a:librenms:librenms:1.62
Librenms » Librenms » Version: 1.62.1

cpe:2.3:a:librenms:librenms:1.62.1
Librenms » Librenms » Version: 1.62.2

cpe:2.3:a:librenms:librenms:1.62.2
Librenms » Librenms » Version: 1.63

cpe:2.3:a:librenms:librenms:1.63
Librenms » Librenms » Version: 1.64

cpe:2.3:a:librenms:librenms:1.64
Librenms » Librenms » Version: 1.64.1

cpe:2.3:a:librenms:librenms:1.64.1
Librenms » Librenms » Version: 1.65

cpe:2.3:a:librenms:librenms:1.65
Librenms » Librenms » Version: 1.65.1

cpe:2.3:a:librenms:librenms:1.65.1
Librenms » Librenms » Version: 1.66

cpe:2.3:a:librenms:librenms:1.66
Librenms » Librenms » Version: 1.67

cpe:2.3:a:librenms:librenms:1.67
Librenms » Librenms » Version: 1.68

cpe:2.3:a:librenms:librenms:1.68
Librenms » Librenms » Version: 1.69

cpe:2.3:a:librenms:librenms:1.69
Librenms » Librenms » Version: 1.70.0

cpe:2.3:a:librenms:librenms:1.70.0
Librenms » Librenms » Version: 1.70.1

cpe:2.3:a:librenms:librenms:1.70.1
Librenms » Librenms » Version: 21.1.0

cpe:2.3:a:librenms:librenms:21.1.0
Librenms » Librenms » Version: 21.10.0

cpe:2.3:a:librenms:librenms:21.10.0
Librenms » Librenms » Version: 21.10.1

cpe:2.3:a:librenms:librenms:21.10.1
Librenms » Librenms » Version: 21.10.2

cpe:2.3:a:librenms:librenms:21.10.2
Librenms » Librenms » Version: 21.11.0

cpe:2.3:a:librenms:librenms:21.11.0
Librenms » Librenms » Version: 21.12.0

cpe:2.3:a:librenms:librenms:21.12.0
Librenms » Librenms » Version: 21.12.1

cpe:2.3:a:librenms:librenms:21.12.1
Librenms » Librenms » Version: 21.2.0

cpe:2.3:a:librenms:librenms:21.2.0
Librenms » Librenms » Version: 21.3.0

cpe:2.3:a:librenms:librenms:21.3.0
Librenms » Librenms » Version: 21.4.0

cpe:2.3:a:librenms:librenms:21.4.0
Librenms » Librenms » Version: 21.5.0

cpe:2.3:a:librenms:librenms:21.5.0
Librenms » Librenms » Version: 21.5.1

cpe:2.3:a:librenms:librenms:21.5.1
Librenms » Librenms » Version: 21.6.0

cpe:2.3:a:librenms:librenms:21.6.0
Librenms » Librenms » Version: 21.7.0

cpe:2.3:a:librenms:librenms:21.7.0
Librenms » Librenms » Version: 21.8.0

cpe:2.3:a:librenms:librenms:21.8.0
Librenms » Librenms » Version: 21.9.0

cpe:2.3:a:librenms:librenms:21.9.0
Librenms » Librenms » Version: 21.9.1

cpe:2.3:a:librenms:librenms:21.9.1
Librenms » Librenms » Version: 22.1.0

cpe:2.3:a:librenms:librenms:22.1.0
Librenms » Librenms » Version: 22.10.0

cpe:2.3:a:librenms:librenms:22.10.0
Librenms » Librenms » Version: 22.11.0

cpe:2.3:a:librenms:librenms:22.11.0
Librenms » Librenms » Version: 22.2.0

cpe:2.3:a:librenms:librenms:22.2.0
Librenms » Librenms » Version: 22.2.1

cpe:2.3:a:librenms:librenms:22.2.1
Librenms » Librenms » Version: 22.2.2

cpe:2.3:a:librenms:librenms:22.2.2
Librenms » Librenms » Version: 22.3.0

cpe:2.3:a:librenms:librenms:22.3.0
Librenms » Librenms » Version: 22.4.0

cpe:2.3:a:librenms:librenms:22.4.0
Librenms » Librenms » Version: 22.4.1

cpe:2.3:a:librenms:librenms:22.4.1
Librenms » Librenms » Version: 22.5.0

cpe:2.3:a:librenms:librenms:22.5.0
Librenms » Librenms » Version: 22.6.0

cpe:2.3:a:librenms:librenms:22.6.0
Librenms » Librenms » Version: 22.7.0

cpe:2.3:a:librenms:librenms:22.7.0
Librenms » Librenms » Version: 22.8.0

cpe:2.3:a:librenms:librenms:22.8.0
Librenms » Librenms » Version: 22.9.0

cpe:2.3:a:librenms:librenms:22.9.0
Librenms » Librenms » Version: 23.1.0

cpe:2.3:a:librenms:librenms:23.1.0
Librenms » Librenms » Version: 23.1.1

cpe:2.3:a:librenms:librenms:23.1.1
Librenms » Librenms » Version: 23.10.0

cpe:2.3:a:librenms:librenms:23.10.0
Librenms » Librenms » Version: 23.11.0

cpe:2.3:a:librenms:librenms:23.11.0
Librenms » Librenms » Version: 23.2.0

cpe:2.3:a:librenms:librenms:23.2.0
Librenms » Librenms » Version: 23.4.0

cpe:2.3:a:librenms:librenms:23.4.0
Librenms » Librenms » Version: 23.4.1

cpe:2.3:a:librenms:librenms:23.4.1
Librenms » Librenms » Version: 23.5.0

cpe:2.3:a:librenms:librenms:23.5.0
Librenms » Librenms » Version: 23.6.0

cpe:2.3:a:librenms:librenms:23.6.0
Librenms » Librenms » Version: 23.7.0

cpe:2.3:a:librenms:librenms:23.7.0
Librenms » Librenms » Version: 23.8.0

cpe:2.3:a:librenms:librenms:23.8.0
Librenms » Librenms » Version: 23.8.1

cpe:2.3:a:librenms:librenms:23.8.1
Librenms » Librenms » Version: 23.8.2

cpe:2.3:a:librenms:librenms:23.8.2
Librenms » Librenms » Version: 23.9.0

cpe:2.3:a:librenms:librenms:23.9.0
Librenms » Librenms » Version: 23.9.1

cpe:2.3:a:librenms:librenms:23.9.1
Librenms » Librenms » Version: 24.1.0

cpe:2.3:a:librenms:librenms:24.1.0
Librenms » Librenms » Version: 24.2.0

cpe:2.3:a:librenms:librenms:24.2.0
Librenms » Librenms » Version: 24.3.0

cpe:2.3:a:librenms:librenms:24.3.0
Librenms » Librenms » Version: 24.4.0

cpe:2.3:a:librenms:librenms:24.4.0
Librenms » Librenms » Version: 24.4.1

cpe:2.3:a:librenms:librenms:24.4.1
Librenms » Librenms » Version: 24.5.0

cpe:2.3:a:librenms:librenms:24.5.0
Librenms » Librenms » Version: 24.6.0

cpe:2.3:a:librenms:librenms:24.6.0
Librenms » Librenms » Version: 24.7.0

cpe:2.3:a:librenms:librenms:24.7.0
Librenms » Librenms » Version: 24.8.0

cpe:2.3:a:librenms:librenms:24.8.0
Librenms » Librenms » Version: 24.8.1

cpe:2.3:a:librenms:librenms:24.8.1
Librenms » Librenms » Version: 24.9.0

cpe:2.3:a:librenms:librenms:24.9.0
Librenms » Librenms » Version: 24.9.1

cpe:2.3:a:librenms:librenms:24.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-49754

Products

Pricing

Contact Us