CVE-2025-47931: LibreNMS Stored XSS Vulnerability in Poller Group Name
Summary
CVE-2025-47931: LibreNMS stored Cross-site Scripting vulnerability in poller group name. Affects librenms/librenms versions < 25.5.0. Fixed in 25.5.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring tool that provides a robust platform for monitoring network devices and services. It offers features such as alerting, graphing, and reporting, making it essential for network administrators. However, version 25.4.0 of LibreNMS contains a stored Cross-Site Scripting (XSS) vulnerability that can be exploited through the 'group name' parameter in the poller groups form, potentially compromising user data and security.
Vulnerability Detail
The vulnerability arises from improper sanitization of user input in the 'group name' parameter, allowing attackers to inject malicious scripts. When a victim accesses the affected page, the injected script executes in their browser, leading to potential data theft, session hijacking, or other malicious activities. This vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation), indicating a significant risk to users who interact with the compromised application.
How To Fix
Minimum fixed version
25.5.0
This is the first release that contains the fix.
composer require librenms/librenms:25.5.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to update to the patched version as mentioned above.
Conclusion
The stored XSS vulnerability in LibreNMS version 25.4.0 poses a significant risk to users, allowing attackers to execute malicious scripts. Updating to version 25.5.0 or later is essential to safeguard against this vulnerability. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for librenms/librenms →
FAQ
It is a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts through the 'group name' parameter.
If exploited, it can lead to data theft, session hijacking, or other malicious activities affecting users who visit the compromised page.
LibreNMS version 25.4.0 is affected. Users should upgrade to version 25.5.0 or later to mitigate the risk.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
While there are no specific workarounds, it is crucial to prioritize updating to the patched version as soon as possible to protect against potential exploitation.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
