Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: librenms/librenms 22.10.0 Clear all filters
TI-2022-03735 CVE-2022-4070 · GHSA-x93j-3hh3-6x23

Insufficient Session Expiration in librenms/librenms

Priority HIGH 75

Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00662 Published 2022-11-20 Fixed in 22.10.0 CWE-613
TI-2022-03734 CVE-2022-4069 · GHSA-p55m-g4m3-qmrp

Cross-site Scripting (XSS) - Generic in librenms/librenms

Priority HIGH 66

Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.93343 Published 2022-11-20 Fixed in 22.10.0 CWE-79
TI-2022-03732 CVE-2022-4067 · GHSA-qch4-jmf8-xvp7

Cross-site Scripting (XSS) - Stored in librenms/librenms

Priority HIGH 68

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.93712 Published 2022-11-20 Fixed in 22.10.0 CWE-79
TI-2022-03278 CVE-2022-3562 · GHSA-5h77-4245-pg5p

Cross-site Scripting (XSS) - Stored in librenms/librenms

Priority HIGH 68

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.94216 Published 2022-11-20 Fixed in 22.10.0 CWE-79
TI-2022-03252 CVE-2022-3525 · GHSA-cv9g-h8mm-xx5h

Deserialization of Untrusted Data in librenms/librenms

Priority HIGH 73

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00951 Published 2022-11-20 Fixed in 22.10.0 CWE-502