Publish Advisories

GHSA-p343-9qwp-pqxv
GHSA-m99v-mmg2-66vf
GHSA-27vf-3g4f-6jp7

advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p343-9qwp-pqxv",
-  "modified": "2025-03-13T15:00:10Z",
+  "modified": "2025-03-25T15:45:23Z",
   "published": "2024-05-07T18:30:34Z",
   "aliases": [
     "CVE-2024-34517"

advisories/github-reviewed/2024/08/GHSA-m99v-mmg2-66vf/GHSA-m99v-mmg2-66vf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m99v-mmg2-66vf",
-  "modified": "2024-08-06T16:07:53Z",
+  "modified": "2025-03-25T15:46:23Z",
   "published": "2024-08-06T15:30:54Z",
   "aliases": [
     "CVE-2024-40101"
@@ -55,6 +55,14 @@
     {
       "type": "WEB",
       "url": "https://seclists.org/fulldisclosure/2024/Aug/1"
+    },
+    {
+      "type": "WEB",
+      "url": "http://microweber.com"
+    },
+    {
+      "type": "WEB",
+      "url": "http://seclists.org/fulldisclosure/2024/Aug/1"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2025/01/GHSA-27vf-3g4f-6jp7/GHSA-27vf-3g4f-6jp7.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-27vf-3g4f-6jp7",
-  "modified": "2025-01-17T15:52:10Z",
+  "modified": "2025-03-25T15:47:35Z",
   "published": "2025-01-16T17:32:30Z",
   "aliases": [
     "CVE-2025-23199"
   ],
   "summary": "LibreNMS Ports Stored Cross-site Scripting vulnerability",
-  "details": "# StoredXSS-LibreNMS-Ports\n\n\n**Description:**\n\n\nStored XSS on the parameter:\n`/ajax_form.php` -> param: descr\n\nRequest:\n```http\nPOST /ajax_form.php HTTP/1.1\nHost: <your_host>\nX-Requested-With: XMLHttpRequest\nX-CSRF-TOKEN: <your_XSRF_token>\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: <your_cookie>\n\ntype=update-ifalias&descr=%22%3E%3Cimg+src+onerror%3D%22alert(1)%22%3E&ifName=lo&port_id=1&device_id=1\n```\n\n\nof Librenms version 24.10.1 ([https://github.com/librenms/librenms](https://github.com/librenms/librenms)) allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure.\n\n\n\n**Proof of Concept:**\n1. Add a new device through the LibreNMS interface.\n2. Edit the newly created device and select the \"ports\" section.\n3. In the \"Description\" field, enter the following payload: `\"><img src onerror=\"alert(1)\">`.\n4. Save the changes.\n5. The XSS vulnerability is triggered when accessing the \"ports\" tab, and the payload is executed again when hovering over the modified value in the \"Port\" field.\n\nPayload:\n![payload](https://github.com/user-attachments/assets/2f38b985-6684-403f-9d1f-e405f09a75bb)\n\nExecutes:\n![image](https://github.com/user-attachments/assets/b70a6e34-d52c-4113-b769-4e271e33de88)\nThe script execution vulnerability in the description field, as shown in the image, occurs at [Line 63 of functions.inc.php](https://github.com/librenms/librenms/blob/master/includes/html/functions.inc.php#L63)\n```php\n$overlib_content = '<div class=overlib><span class=overlib-text>' . $text . '</span><br />';\n```\n\n![image](https://github.com/user-attachments/assets/97b85403-5b7e-4f43-932c-d33bd3c0f73f)\n\n\n\n\n**Impact:**\n\nExecution of Malicious Code\n",
+  "details": "# StoredXSS-LibreNMS-Ports\n\n\n**Description:**\n\n\nStored XSS on the parameter:\n`/ajax_form.php` -> param: descr\n\nRequest:\n```http\nPOST /ajax_form.php HTTP/1.1\nHost: <your_host>\nX-Requested-With: XMLHttpRequest\nX-CSRF-TOKEN: <your_XSRF_token>\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nCookie: <your_cookie>\n\ntype=update-ifalias&descr=%22%3E%3Cimg+src+onerror%3D%22alert(1)%22%3E&ifName=lo&port_id=1&device_id=1\n```\n\n\nof Librenms version 24.10.1 ([https://github.com/librenms/librenms](https://github.com/librenms/librenms)) allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure.\n\n\n\n**Proof of Concept:**\n1. Add a new device through the LibreNMS interface.\n2. Edit the newly created device and select the \"ports\" section.\n3. In the \"Description\" field, enter the following payload: `\"><img src onerror=\"alert(1)\">`.\n4. Save the changes.\n5. The XSS vulnerability is triggered when accessing the \"ports\" tab, and the payload is executed again when hovering over the modified value in the \"Port\" field.\n\nPayload:\n![payload](https://github.com/user-attachments/assets/2f38b985-6684-403f-9d1f-e405f09a75bb)\n\nExecutes:\n![image](https://github.com/user-attachments/assets/b70a6e34-d52c-4113-b769-4e271e33de88)\nThe script execution vulnerability in the description field, as shown in the image, occurs at [Line 63 of functions.inc.php](https://github.com/librenms/librenms/blob/master/includes/html/functions.inc.php#L63)\n```php\n$overlib_content = '<div class=overlib><span class=overlib-text>' . $text . '</span><br />';\n```\n\n![image](https://github.com/user-attachments/assets/97b85403-5b7e-4f43-932c-d33bd3c0f73f)\n\n\n\n\n**Impact:**\n\nExecution of Malicious Code",
   "severity": [
     {
       "type": "CVSS_V3",