LibreNMS XSS Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-18478 · ADVISORY
• librenms/librenms · WEB
• librenms/librenms#9171 · WEB
• librenms/librenms release 1.44 · WEB
• hackpuntes.com/cve-2018-18478-libre-nms-1-43-cross-site-scripting-persistente · WEB
• hackpuntes.com/cve-2018-18478-libre-nms-1-43-cross-site-scripting-persistente · Exploit

librenms/librenms のその他の脆弱性

• CVE-2026-84192高 7.1LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sour…
• CVE-2026-84190高 7.2LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration paramet…
• CVE-2026-84189高 8.1LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable Oxidized integratio…
• CVE-2026-84188中 4.8LibreNMS versions <= 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr.<graphtype> configuration settings, which…
• CVE-2026-55182高 8.6LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection…