CVE-2022-0575: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

February 14, 2022 (updated February 23, 2022)

A stored Cross-site Scripting (XSS) vulnerability was found in librenms.

References

github.com/advisories/GHSA-hxmr-5gv9-6p8v
github.com/librenms/librenms/commit/4f86915866703e2fcd1e34b3fc1181ec2ad78e54
huntr.dev/bounties/13951f51-deed-4a3d-8275-52306cc5a87d
nvd.nist.gov/vuln/detail/CVE-2022-0575

Code Behaviors & Features

Detect and mitigate CVE-2022-0575 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →