GitHub Advisoryadvisory · Packagist

GHSA-86rg-8hc8-v82p LibreNMS is vulnerable to Reflected-XSS in `report_this` function

MEDIUM Published 2025-10-13 Modified 2025-10-14 Official page ↗
Aliases
CVE-2025-62365
Ecosystem
Packagist
Packages
librenms/librenms
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P
Weaknesses
CWE-79
Reviewed
2025-10-13

Affected packages

• Packagist librenms/librenms: < 25.7.0 → fixed in 25.7.0

Description

Summary Reflected-XSS in `report_this` function in `librenms/includes/functions.php` Details Recently, it was discovered that the `report_this` function had improper filtering (`htmlentities` function was incorrectly used in a href environment), which caused the `project_issues` parameter to trigger an XSS vulnerability. The Vulnerable Sink: https://github.com/librenms/librenms/blob/master/includes/functions.php#L444 PoC GET `project_issues=javascript:alert(document.cookie)` Impact XSS vulnerabilities allow attackers to execute malicious scripts in users' browsers, enabling unauthorized access to sensitive data, session hijacking, or malware distribution. Suggestion It is recommended to filter dangerous protocols, e.g. `javascript:`/`file:`.

Related

Alias · CVE (1)

  • CVE-2025-62365 LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References