GitHub Advisoryadvisory · Packagist

GHSA-7289-chwj-7h86 Path traversal in librenms/librenms

CRITICAL Published 2021-12-10 Modified 2021-12-06 Official page ↗
Aliases
CVE-2021-44278
Ecosystem
Packagist
Packages
librenms/librenms
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
Reviewed
2021-12-06

Affected packages

• Packagist librenms/librenms: <= 21.11.0 (no fix yet)

Description

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.

Related

Alias · CVE (1)

  • CVE-2021-44278 Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References