CVE-2020-15877: Exposure of Resource to Wrong Sphere

July 21, 2020 (updated July 21, 2021)

An issue was discovered in LibreNMS. It has insufficient access control for normal users in routes/web.php.

References

community.librenms.org/c/announcements
nvd.nist.gov/vuln/detail/CVE-2020-15877

Code Behaviors & Features

Detect and mitigate CVE-2020-15877 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →