Description (CNA)
LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| librenms / librenms | affected 23.10.0 before 26.4.1 |
CWE
CWE-78
References
- https://github.com/librenms/librenms/security/advisories/GHSA-7hmq-j399-mqwf
- https://projectblack.io/blog/librenms-authenticated-rce-26-5-0/#rce-by-command-line-injection-2641
ADP enrichment
No English description supplied.