Cross-site Scripting Vulnerability in LibreNMS Network Monitoring System

CVE-2025-23201

What is CVE-2025-23201?

LibreNMS, a community-driven network monitoring solution, is vulnerable to cross-site scripting (XSS) attacks through the /addhost endpoint's community parameter. Versions up to 24.10.1 are affected, allowing remote attackers to inject malicious scripts. Once a user interacts with the affected page, the injected script executes, potentially leading to unauthorized actions or exposure of sensitive data. Users are strongly advised to update to version 24.11.0, which addresses this vulnerability. Currently, no workarounds exist to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References