CVE-2025-23201: Librenms Reflected XSS Vulnerability in Community Parameter
Summary
CVE-2025-23201: Librenms has a reflected XSS on error alert. Affects librenms/librenms versions < 24.11.0. Fixed in 24.11.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Librenms is an open-source network monitoring tool that provides a comprehensive suite for monitoring network devices, servers, and services. It allows users to visualize their network's performance and health through various metrics and alerts. However, the application is vulnerable to a reflected cross-site scripting (XSS) attack, specifically in the '/addhost' endpoint, where user input is not properly sanitized.
Vulnerability Detail
The vulnerability arises from the improper handling of user input in the Community parameter of the '/addhost' endpoint in Librenms versions up to 24.10.1. Attackers can exploit this flaw by injecting malicious scripts that execute when a user interacts with the page displaying the data. This can lead to unauthorized actions, data exposure, and potential compromise of user accounts. The reflected XSS occurs when the application reflects the input back to the user without proper validation or encoding.
How To Fix
Minimum fixed version
24.11.0
This is the first release that contains the fix.
composer require librenms/librenms:24.11.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid entering any untrusted or potentially malicious input in the Community field of the '/addhost' form. Educate users about the risks of XSS and encourage them to report any suspicious behavior.
Conclusion
The reflected XSS vulnerability in Librenms poses a significant risk to users by allowing attackers to execute malicious scripts. It is crucial to update to the patched version (24.11.0 or later) to mitigate this risk. Additionally, users should be aware of the potential impacts and take necessary precautions.
See every vulnerability recorded for librenms/librenms →
FAQ
Reflected XSS is a type of attack where malicious scripts are injected into a web application and executed immediately when a user interacts with the affected page. It typically occurs when user input is not properly sanitized.
If you are using Librenms version 24.10.1 or earlier, your installation is vulnerable. You can check your version by running git describe --tags in the Librenms directory.
The vulnerability can lead to unauthorized actions, data exposure, and compromise of user accounts, as attackers can execute arbitrary scripts in the context of the user's session.
Yes, tools like Vulert can monitor your application for open-source vulnerabilities in real-time using the composer.lock file. You can also use the Vulert playground to check if your application is affected without any signup.
The CVSS score for this vulnerability is 5.4, indicating a moderate level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
