Severity: high (8.8)
First published: Fri Sep 15 2023
Last modified: Fri Sep 15 2023
CWE: 79
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0.
The severity of GHSA-jp3c-g46v-jg2c is high with a severity value of 8.8.
GHSA-jp3c-g46v-jg2c affects the GitHub repository librenms/librenms prior to version 23.9.0 by allowing cross-site scripting (XSS) attacks.
To fix GHSA-jp3c-g46v-jg2c, update your librenms/librenms package to version 23.9.0 or later.
The CVE ID for GHSA-jp3c-g46v-jg2c is CVE-2023-4979.
You can find more information about GHSA-jp3c-g46v-jg2c at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-4979), [GitHub Commit](https://github.com/librenms/librenms/commit/49d66fa31b43acef02eaa09ee9af15fe7e16cd03), [Huntr Bounty](https://huntr.dev/bounties/e67f8f5d-4048-404f-9b86-cb6b8719b77f).
