CVE-2024-32461: LibreNMS vulnerable to time-based SQL injection that leads to database extraction
Summary SQL injection vulnerability in POST /search/search=packages in LibreNMS 24.3.0 allows a user with global read privileges to execute SQL commands via the package parameter.
Details There is a lack of hygiene of data coming from the user in line 83 of the file librenms/includes/html/pages/search/packages.inc.php !vulnerability
PoC https://doc.clickup.com/9013166444/p/h/8ckm0bc-53/16811991bb5fff6
Impact With this vulnerability, we can exploit a SQL injection time based vulnerability to extract all data from the database, such as administrator credentials
Other sources
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injection vulnerability in POST /search/search=packages in LibreNMS prior to version 24.4.0 allows a user with global read privileges to execute SQL commands via the package parameter. With this vulnerability, an attacker can exploit a SQL injection time based vulnerability to extract all data from the database, such as administrator credentials. Version 24.4.0 contains a patch for the vulnerability.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32461?
CVE-2024-32461 has been classified as a high severity vulnerability due to its potential impact on database security.
How do I fix CVE-2024-32461?
To fix CVE-2024-32461, upgrade LibreNMS to version 24.4.0 or later.
Who is affected by CVE-2024-32461?
Any user of LibreNMS version 24.3.0 with global read privileges is affected by CVE-2024-32461.
What type of vulnerability is CVE-2024-32461?
CVE-2024-32461 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.
What are the consequences of exploiting CVE-2024-32461?
Exploiting CVE-2024-32461 could allow an attacker to manipulate the database, potentially leading to data breaches.