CVE-2023-5591 in LibreNMS

Prediction

by VulDB Data Team • 11/02/2023

A vulnerability was detected in LibreNMS up to 23.9.x. The impacted element is an unknown function. Performing a manipulation results in sql injection. Attacking locally is a requirement. Upgrading to version 23.10.0 is sufficient to resolve this issue. The patch is named 908aef65967ce6184bdc587fd105660d5d55129e. Upgrading the affected component is recommended.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Huntr.dev
• Reservation: 10/16/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-242206
• CPE: ready
• CWE: CWE-89 (confirmed)
• CVSS: 6.5 (NVD)
• EPSS: 0.22222
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-5591
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-5591
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-5591/