CVE-2025-62365
LibreNMS vulnerable to Reflected-XSS in `report_this` function
概要
LibreNMS vulnerable to Reflected-XSS in report_this function
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in report_this function in librenms/includes/functions.php. The report_this function had improper filtering (htmlentities function was incorrectly use in a href environment), which caused the project_issues parameter to trigger an XSS vulnerability. This vulnerability is fixed in 25.7.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com