Description

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.

Related CPE's

a

librenms

librenms

Vulnerable

References

https://github.com/librenms/librenms/commit/ae3925b09ad3c5d0f7a9d5a26ae2f2f778834948

PatchThird Party Advisory

https://huntr.dev/bounties/ed048e8d-87af-440a-a91f-be1e65a40330

Permissions RequiredThird Party Advisory

https://github.com/librenms/librenms/commit/ae3925b09ad3c5d0f7a9d5a26ae2f2f778834948

PatchThird Party Advisory

https://huntr.dev/bounties/ed048e8d-87af-440a-a91f-be1e65a40330

Permissions RequiredThird Party Advisory

Weaknesses

[email protected]

Secondary
CWE-502

[email protected]

Primary
CWE-502

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-11-20T04:15:11.393Z

3 years ago

Last modified

2024-11-21T06:19:42.570Z

1 year ago