CVE-2024-50351

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Reflected Cross-Site Scripting (XSS) vulnerability in the "section" parameter of the "logs" tab of a device allows attackers to inject arbitrary JavaScript. This vulnerability results in the execution of malicious code when a user accesses the page with a malicious "section" parameter, potentially compromising their session and enabling unauthorized actions. The issue arises from a lack of sanitization in the "report_this()" function. This vulnerability is fixed in 24.10.0.

• CWE-79

• https://github.com/librenms/librenms/commit/6a14a9bd767c6e452e4df77a24126c3eeb93dcbfPatch
• https://github.com/librenms/librenms/security/advisories/GHSA-v7w9-63xh-6r3wExploit, Vendor Advisory

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50346WebFeed is a lightweight web feed reader extension for Firef…5.1
• CVE-2024-50347Laravel Reverb provides a real-time WebSocket communication …6.3
• CVE-2024-50348InstantCMS is a free and open source content management syst…5.4
• CVE-2024-50349Git is a fast, scalable, distributed revision control system…4.7
• CVE-2024-5035The affected device expose a network service called "rftest"…8.8
• CVE-2024-50350LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-50352LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-50353ICG.AspNetCore.Utilities.CloudStorage is a collection of clo…5.3
• CVE-2024-50354gnark is a fast zk-SNARK library that offers a high-level AP…5.5
• CVE-2024-50355LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…4.8
• CVE-2024-50356Press, a Frappe custom app that runs Frappe Cloud, manages i…0
• CVE-2024-50357FutureNet NXR series routers provided by Century Systems Co.…9.8