CVE-2025-23201 Reflected Cross-site Scripting on error alert in librenms

Medium 5.4 Published 16 Jan 2025 Updated 12 Feb 2025

Remote attackers can inject malicious scripts via the community parameter in Librenms, leading to script execution and potential data exposure.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2025-23201?

CVE-2025-23201 is a medium-severity cross-site scripting vulnerability in Librenms Librenms, published on 16 Jan 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to Cross-site Scripting (XSS) on the parameters:`/addhost` -> param: community. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Weakness: CWE-79

Which versions are affected by CVE-2025-23201?

2 open source packages ship an affected version, including librenms/librenms. It affects 1 product.

Package	Affected	Fixed in
`librenms/librenms` Packagist	All versions	`24.11.0`
`librenms/librenms` Packagist	All versions	`24.11.0`

Products include Librenms Librenms.

How do I fix CVE-2025-23201?

Upgrade librenms/librenms to 24.11.0 or later.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2025-23201 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-23201 exists.

All Librenms Librenms vulnerabilities

Sources

Also known as GHSA-g84x-g96g-rcjc.