WEB LibreNMS Alert Rule Name Stored Cross-Site Scripting (CVE-2024-47525)

Rule ID

1235782

Severity

Medium

Description

A stored cross-site scripting vulnerability has been reported for LibreNMS. The vulnerability is due to improper input validation in the Alert Rules page. A remote, authenticated attacker could exploit the vulnerability by sending a crafted request to the target server. Successful exploits could result in arbitrary code execution in the context of the victim's browser.

Impact

Cross-site scripting

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A