Low severity3.5NVD Advisory· Published Oct 1, 2024· Updated Jun 17, 2026
CVE-2024-47526
CVE-2024-47526
Description
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the "Alert Templates" feature allows users to inject arbitrary JavaScript into the alert template's name. This script executes immediately upon submission but does not persist after a page refresh.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
librenms/librenmsPackagist | < 24.9.0 | 24.9.0 |
Affected products
3Patches
Vulnerability mechanics
References
6- github.com/librenms/librenms/commit/f259edc19b9f0ccca484c60b1ba70a0bfff97ef5nvdPatchWEB
- github.com/librenms/librenms/security/advisories/GHSA-gcgp-q2jq-fw52nvdExploitProductWEB
- github.com/advisories/GHSA-gcgp-q2jq-fw52ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-47526ghsaADVISORY
- github.com/librenms/librenms/blob/0e741e365aa974a74aee6b43d1b4b759158a5c7e/includes/html/forms/alert-templates.inc.phpnvdProductWEB
- github.com/librenms/librenms/blob/0e741e365aa974a74aee6b43d1b4b759158a5c7e/includes/html/modal/alert_template.inc.phpnvdProductWEB
News mentions
0No linked articles in our index yet.