CVE-2025-23200: LibreNMS Stored XSS Vulnerability in Misc Section
Summary
CVE-2025-23200: LibreNMS Misc Section Stored Cross-site Scripting vulnerability. Affects librenms/librenms versions >= 23.9.0, < 24.11.0. Fixed in 24.11.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring tool that provides a robust platform for monitoring network devices and services. It offers features such as device discovery, alerting, and performance metrics. However, like many web applications, it is susceptible to security vulnerabilities, including cross-site scripting (XSS) attacks, which can compromise user data and application integrity.
Vulnerability Detail
The vulnerability is a Stored Cross-Site Scripting (XSS) issue found in LibreNMS version 24.10.1. It arises from the improper handling of user input in the 'ajax_form.php' file, specifically the 'state' parameter. Attackers can exploit this vulnerability by injecting malicious scripts that execute when a user interacts with the affected page. The root cause is the lack of sanitization or encoding of the user input before it is rendered in the HTML, allowing for potential unauthorized actions or data exposure.
How To Fix
Minimum fixed version
24.11.0
This is the first release that contains the fix.
composer require librenms/librenms:24.11.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the Misc section to input any untrusted data until the package is updated. Additionally, ensure that user input is properly sanitized and validated before processing.
Conclusion
The Stored XSS vulnerability in LibreNMS poses a significant risk to users by allowing attackers to inject malicious scripts. It is crucial to update to the patched version to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for librenms/librenms →
FAQ
Stored XSS is a type of security vulnerability where an attacker injects malicious scripts into a web application, which are then stored on the server and executed when users access the affected page.
If you are using LibreNMS version 24.10.1 or earlier, your installation is vulnerable. You can check your version by running 'git describe --tags' in your LibreNMS directory.
The vulnerability can lead to unauthorized actions, data exposure, and the execution of malicious scripts in the context of the affected user, potentially compromising sensitive information.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using the composer.lock file. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
The CVSS score for this vulnerability is 4.6, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
