Cross-site Scripting (XSS) - DOM in librenms/librenms

CVE-2023-4981

What is CVE-2023-4981?

A cross-site scripting vulnerability has been identified in LibreNMS, a network monitoring tool. This flaw occurs within the Document Object Model (DOM) of the application, allowing attackers to inject malicious scripts. If successfully exploited, this vulnerability could enable unauthorized access to user information or manipulate user sessions. Users of LibreNMS versions prior to 23.9.0 are urged to update to the latest version to mitigate potential risks.

References