CVE-2024-49754: LibreNMS Stored XSS Vulnerability in API Access Page
Summary
CVE-2024-49754: LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php. Affects librenms/librenms versions < 24.10.0. Fixed in 24.10.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring tool that provides a robust platform for monitoring network devices and services. It offers features such as alerting, reporting, and visualization of network performance. However, like many web applications, it is susceptible to security vulnerabilities, including Cross-Site Scripting (XSS), which can compromise user accounts and data integrity.
Vulnerability Detail
A Stored Cross-Site Scripting (XSS) vulnerability exists in the API-Access page of LibreNMS, allowing authenticated users to inject arbitrary JavaScript through the 'token' parameter when creating a new API token. This vulnerability arises from insufficient sanitization of the 'token_hash' variable before it is output in the HTML. An attacker can exploit this by injecting a malicious script, which executes in the context of other users' sessions, potentially leading to account compromise and unauthorized actions.
How To Fix
Minimum fixed version
24.10.0
This is the first release that contains the fix.
composer require librenms/librenms:24.10.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the API Access page until the package is updated. Additionally, ensure that only trusted users have access to the API token creation feature to minimize the risk of exploitation.
Conclusion
The CVE-2024-49754 vulnerability in LibreNMS poses a significant risk due to its potential for stored XSS attacks. It is crucial for users to update to the latest version to protect against this vulnerability and ensure the security of their network monitoring environment.
See every vulnerability recorded for librenms/librenms →
FAQ
CVE-2024-49754 is a vulnerability in LibreNMS that allows authenticated users to perform stored XSS attacks via the API Access page.
If you are using LibreNMS version 24.9.1 or earlier, your installation is vulnerable. You can check your version by running 'git describe --tags' in the LibreNMS directory.
The vulnerability can lead to the execution of malicious JavaScript in the context of other users' sessions, resulting in account compromise and unauthorized actions.
Yes, you can use Vulert to monitor your application for open-source vulnerabilities in real-time. It analyzes your composer.lock file to provide alerts.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
