Code Injection in librenms/librenms
CVE-2023-4977
7.3HIGH
What is CVE-2023-4977?
A code injection vulnerability has been identified in the LibreNMS software, which could allow an attacker to execute arbitrary code on systems running affected versions. This flaw, present in versions prior to 23.9.0, poses significant security risks, potentially enabling unauthorized access or manipulation of the system. Users are advised to update to the latest version to mitigate this risk. For detailed information, refer to the commit made by the LibreNMS team and related reports.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
librenms/librenms < 23.9.0
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved