Non évaluée
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.
CVE-2020-15873
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory community.librenms.org
- advisory github.com
- patch github.com
- patch github.com
- report research.loginsoft.com