En resumen
- CVE-2020-35700 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a librenms/librenms, librenms (librenms).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.3%, mayor que el 83.6% de las vulnerabilidades.
- Solución: actualizar a 21.1.0 o posterior.
Description
A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.
NVD description
A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.
Más vulnerabilidades de librenms/librenms
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free