CVE-2019-12463: Improper Encoding or Escaping of Output and Injection in LibreNMS
Summary
CVE-2019-12463: Improper Encoding or Escaping of Output and Injection in LibreNMS. Affects librenms/librenms versions >= 1.50.1, < 1.53. Fixed in 1.53. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring and management system. It provides a comprehensive set of features for monitoring network devices, collecting performance data, and generating graphs and reports. LibreNMS version 1.50.1 is affected by a vulnerability that allows an attacker to inject malicious code into the system, potentially leading to disclosure of sensitive information, denial of service, or arbitrary file writing.
Vulnerability Detail
The vulnerability in LibreNMS 1.50.1 is due to improper encoding or escaping of user-supplied input in the scripts responsible for handling graphing options. The affected scripts, includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php, do not adequately validate or encode certain fields of user input. While some parameters are filtered with mysqli_real_escape_string to prevent SQL injection attacks, others remain unfiltered. This allows an attacker to inject RRDtool syntax with newline characters via the html/graph.php and html/graph-realtime.php scripts. By leveraging the versatility of RRDtool syntax, an attacker can perform various malicious actions, including disclosing directory structure and filenames, revealing file content, causing denial of service, or writing arbitrary files. It is important to note that this vulnerability requires authentication and the pathnames differ from CVE-2019-10665.
How To Fix
Minimum fixed version
1.53
This is the first release that contains the fix.
composer require librenms/librenms:1.53Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is essential to apply the recommended fix by upgrading to LibreNMS version 1.53 or later.
Conclusion
The vulnerability in LibreNMS 1.50.1 allows an authenticated attacker to inject malicious code, potentially leading to various security risks. It is highly recommended to upgrade to LibreNMS version 1.53 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for librenms/librenms →
FAQ
LibreNMS is an open-source network monitoring and management system that provides a comprehensive set of features for monitoring network devices, collecting performance data, and generating graphs and reports.
The vulnerability allows an attacker to inject malicious code into LibreNMS, potentially leading to disclosure of sensitive information, denial of service, or arbitrary file writing.
Yes, authentication is required to exploit this vulnerability.
The recommended fix is to upgrade to LibreNMS version 1.53 or later, which includes proper validation and encoding of user-supplied input.
No specific workarounds are available for this vulnerability. It is crucial to apply the recommended fix by upgrading to the latest version of LibreNMS.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
