GitHub Advisoryadvisory · Packagist

GHSA-23f2-vgr6-fwv7 Command injection in librenms

HIGH Published 2022-06-03 Modified 2022-06-03 Official page ↗

Aliases: CVE-2022-29712
Ecosystem: Packagist
Packages: librenms/librenms
Severity: High
Weaknesses: CWE-74
Reviewed: 2022-06-03

Affected packages

• Packagist librenms/librenms: < 22.4.0 → fixed in 22.4.0

Description

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters.

Related

Alias · CVE (1)

CVE-2022-29712 LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param… vulnerability

Weakness · CWE (1)

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References