CVE-2025-23198: LibreNMS Display Name Stored XSS Vulnerability
Summary
CVE-2025-23198: LibreNMS Display Name Stored Cross-site Scripting vulnerability. Affects librenms/librenms versions >= 24.9.0, < 24.11.0. Fixed in 24.11.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring system that provides a range of features for monitoring network devices, including performance metrics, alerts, and visualizations. It is widely used for its flexibility and extensibility, allowing users to customize their monitoring setup. However, certain versions of LibreNMS (specifically 24.9.0, 24.10.0, and 24.10.1) are vulnerable to a stored cross-site scripting (XSS) attack, which can compromise the security of the application and its users.
Vulnerability Detail
The vulnerability arises from improper handling of user input in the 'Display Name' field when editing device settings. Attackers can inject malicious scripts that execute when other users view the affected device settings. This can lead to unauthorized actions, data exposure, and potential compromise of user accounts. The vulnerability is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation), and it affects specific versions of LibreNMS, allowing for the execution of arbitrary JavaScript code in the context of the user's session.
How To Fix
Minimum fixed version
24.11.0
This is the first release that contains the fix.
composer require librenms/librenms:24.11.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can sanitize the input in the 'Display Name' field to prevent script injection. However, this is not a permanent solution, and updating to the patched version is strongly recommended.
Conclusion
The stored XSS vulnerability in LibreNMS poses a significant risk to users, allowing attackers to execute malicious scripts through the 'Display Name' field. It is crucial for users to update to the patched version to safeguard their systems and data.
See every vulnerability recorded for librenms/librenms →
FAQ
The CVSS score of this vulnerability is 4.6, indicating a moderate severity level.
The affected versions are 24.9.0, 24.10.0, and 24.10.1. Users should upgrade to version 24.11.0 or later.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The potential impacts include unauthorized actions, data exposure, and the execution of malicious scripts in the context of the user's session.
While sanitizing input can help mitigate the risk, the best course of action is to update to the latest version of LibreNMS.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
