CVE-2022-36745

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in packagist/librenms

Identifiers

GHSA-5229-94p3-7wwq, CVE-2022-36745

Package Slug

packagist/librenms

Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Description

LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.

Affected Versions

All versions before 22.7.0

Solution

Upgrade to version 22.7.0 or above.

Last Modified

2022-09-27

source