CVE-2024-52526 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php

What is CVE-2024-52526?

CVE-2024-52526 is a medium-severity cross-site scripting vulnerability in Librenms Librenms, published on 15 Nov 2024. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Services" tab of the Device page allows authenticated users to inject arbitrary JavaScript through the "descr" parameter when adding a service to a device. This vulnerability could result in the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and enabling unauthorized actions. This vulnerability is fixed in 24.10.0.

Weakness: CWE-79

Which versions are affected by CVE-2024-52526?

2 open source packages ship an affected version, including librenms/librenms. It affects 1 product.

Products include Librenms Librenms.

How do I fix CVE-2024-52526?

Upgrade librenms/librenms to 24.10.0 or later.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2024-52526 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-52526 exists.

Other vulnerabilities in Librenms Librenms

• CVE-2023-4982 Cross-site Scripting (XSS) - Stored in librenms/librenms Critical 9.8
• CVE-2022-29712 Command injection in librenms Critical 9.8
• CVE-2021-44278 Path traversal in librenms/librenms Critical 9.8
• CVE-2019-10665 LibreNMS Information Disclosure Critical 9.8
• CVE-2018-20434 LibreNMS arbitrary OS commands execution Critical 9.8

All Librenms Librenms vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8fh4-942r-jf2g.