medium6.1
CVE-2022-3561
Cross-site Scripting in librenms/librenms
Impact
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | librenms/librenms | < 22.10.0 | 22.10.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Librenms | Librenms | before 22.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/librenms/librenms/commit/d86cbcd96d684e4de8dfa50b4490e4e02782d242
- https://huntr.dev/bounties/7389e6eb-4bce-4b97-999d-d3b70d8cee34
- https://huntr.com/bounties/7389e6eb-4bce-4b97-999d-d3b70d8cee34
- https://github.com/advisories/GHSA-264w-gw9g-fhgj
- https://nvd.nist.gov/vuln/detail/CVE-2022-3561