CVE-2019-10671 SQL Injection in LibreNMS
An authenticated attacker can exploit SQL injection in LibreNMS to extract or manipulate database data via the graph.php sort parameter.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-10671?
CVE-2019-10671 is a high-severity SQL injection vulnerability in Librenms Librenms, published on 9 Sep 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated by the graph.php sort parameter.
Weakness: CWE-89
Which versions are affected by CVE-2019-10671?
2 open source packages ship an affected version, including librenms/librenms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
librenms/librenms Packagist | All versions | 1.50.1 |
librenms/librenms Packagist | All versions | 1.50.1 |
Products include Librenms Librenms.
How do I fix CVE-2019-10671?
Upgrade librenms/librenms to 1.50.1 or later.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2019-10671 being exploited?
There is no known exploitation of CVE-2019-10671 in the wild and no public exploit code.
Other vulnerabilities in Librenms Librenms
Sources
Also known as GHSA-g9xh-3w5g-229r.