CVE-2025-47931: LibreNMS stored Cross-site Scripting vulnerability in poller group name
LibreNMS v25.4.0 suffers from Stored Cross-Site Scripting (XSS) Vulnerability in the 'group name' parameter of the 'http://localhost/poller/groups' form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users.
---------------------------------POC----------------------------- Before Setting: Enable 'distributedpoller' in http://localhost/settings/poller/distributed 1. Attacker creates a new poller group and injects the payload in the 'group name' parameter payload: <script>alert('XSS')</script> 2. Victim navigates to the 'http://localhost/addhost' to add a new host 3. The payload is executed
code sink: https://github.com/librenms/librenms/blob/25.4.0/includes/html/pages/addhost.inc.php#L284
Other sources
LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the group name parameter of the http://localhost/poller/groups form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. LibreNMS v25.5.0 contains a patch for the issue.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47931?
The severity of CVE-2025-47931 is classified as medium due to its impact on stored cross-site scripting.
How do I fix CVE-2025-47931?
To fix CVE-2025-47931, upgrade LibreNMS to version 25.5.0 or later.
What systems are affected by CVE-2025-47931?
CVE-2025-47931 affects LibreNMS versions up to and including version 25.4.0.
What type of vulnerability is CVE-2025-47931?
CVE-2025-47931 is a Stored Cross-Site Scripting (XSS) vulnerability.
What can attackers do with CVE-2025-47931?
Attackers can exploit CVE-2025-47931 to inject malicious scripts into the `group name` parameter of the application.