CVE-2024-47523: Stored XSS Vulnerability in LibreNMS Alert Transports
Summary
CVE-2024-47523: LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature. Affects librenms/librenms versions < 24.9.0. Fixed in 24.9.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring system that provides a range of features for monitoring network devices and services. It allows users to set up alerts and notifications based on various conditions. The 'Alert Transports' feature is designed to manage how alerts are sent out, but it has a critical vulnerability that allows for the injection of malicious scripts.
Vulnerability Detail
A Stored Cross-Site Scripting (XSS) vulnerability exists in the 'Alert Transports' feature of LibreNMS. This vulnerability arises from improper sanitization of user input in the 'Details' field when creating an alert transport. An authenticated user can inject arbitrary JavaScript, which is then stored and executed in the context of other users' sessions. This can lead to account compromise and unauthorized actions, as the malicious script runs whenever the transport details are accessed.
How To Fix
Minimum fixed version
24.9.0
This is the first release that contains the fix.
composer require librenms/librenms:24.9.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the 'Alert Transports' feature until the application is updated. Additionally, restrict access to the feature to trusted users only, minimizing the risk of exploitation.
Conclusion
The Stored XSS vulnerability in LibreNMS's 'Alert Transports' feature poses a significant risk to users, allowing for the execution of malicious scripts. It is crucial to update to the latest version to mitigate this risk and ensure the security of user accounts.
See every vulnerability recorded for librenms/librenms →
FAQ
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
Authenticated users of LibreNMS who have access to the 'Alert Transports' feature are affected.
An attacker can execute arbitrary JavaScript in the context of other users' sessions, potentially compromising their accounts and performing unauthorized actions.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring signup.
If an immediate update is not possible, restrict access to the 'Alert Transports' feature and monitor for any suspicious activity.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
