Headline
GHSA-3jh2-wmv7-m932: LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter
LibreNMS versions 22.8.0 and prior allow attackers to execute arbitrary JavaScript code via the Schedule Maintenance Title parameter. A patch is available and anticipated to be part of version 22.9.0.
LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter
Moderate severity GitHub Reviewed Published Sep 18, 2022 • Updated Sep 20, 2022
Related news
CVE-2022-3231: Fix scheduled maintenance xss (#14360) · librenms/librenms@0805002
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.