First published: Sun Feb 13 2022(Updated: )
Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.
Credit: security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Librenms Librenms | <22.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-0575 is medium with a CVSS score of 5.4.
CVE-2022-0575 affects Packagist librenms/librenms prior to version 22.2.0.
Cross-site Scripting (XSS) is a security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
To fix CVE-2022-0575, you should update your Packagist librenms/librenms installation to version 22.2.0 or higher.
You can find more information about CVE-2022-0575 at the following references: [Reference 1](https://github.com/librenms/librenms/commit/4f86915866703e2fcd1e34b3fc1181ec2ad78e54), [Reference 2](https://huntr.dev/bounties/13951f51-deed-4a3d-8275-52306cc5a87d), [Reference 3](https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html).