Cross-site Scripting (XSS) - Reflected in librenms/librenms

CVE-2023-4347

What is CVE-2023-4347?

A reflected Cross-site Scripting (XSS) vulnerability was identified in LibreNMS prior to version 23.8.0. This vulnerability allows an unauthorized attacker to inject malicious scripts into web pages viewed by other users. If successfully executed, this could lead to potential information theft or the execution of arbitrary actions on behalf of unsuspecting users, putting sensitive data at risk. Users are advised to upgrade their installations to the latest version to mitigate this security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References