LibreNMS Arbitrary File Read

MEDIUM 5.9CVE-2017-16759 · GHSA-4ccx-wjqp-5fww · Published 09/11/2017 · updated 17/06/2026

In short

CVE-2017-16759 is a MEDIUM (CVSS 5.9) vulnerability affecting librenms/librenms, librenms (librenms).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.9% of all vulnerabilities.
Fix: update to 1.31 or later.

Package	Affected versions	Patched versions
librenms/librenms Packagist	`< 1.31`	`1.31`
librenms librenms	`≤ 1.30`	No fix yet

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.

NVD description

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.31

1.31

≤ 1.30

No fix yet

More vulnerabilities in librenms/librenms

See all →