Описание
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajax_rulesuggest.php?debug=1&term= request.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.53 (исключая)
cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 0%
0.00006
Низкий
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
EPSS
Процентиль: 0%
0.00006
Низкий
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-89