CVE-2023-4977
published 2023-09-15CVE-2023-4977: Code Injection in GitHub repository librenms/librenms prior to 23.9.0.
PriorityP429medium5.4CVSS 3.1
AVNACLPRLUINSUCLILAN
EPSS
0.45%
35.6th percentile
Code Injection in GitHub repository librenms/librenms prior to 23.9.0.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| librenms | librenms | < 23.9.0 | 23.9.0 |
| librenms | librenms | >= 0 < 23.9.0 | 23.9.0 |
| librenms | librenms_librenms | >= unspecified < 23.9.0 | 23.9.0 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
nvdv3.07.3HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
LibreNMS Code Injection vulnerability
osv·2023-09-15
CVE-2023-4977 [MEDIUM] LibreNMS Code Injection vulnerability
LibreNMS Code Injection vulnerability
Code Injection in GitHub repository librenms/librenms prior to 23.9.0.
GHSA
LibreNMS Code Injection vulnerability
ghsa·2023-09-15
CVE-2023-4977 [MEDIUM] CWE-94 LibreNMS Code Injection vulnerability
LibreNMS Code Injection vulnerability
Code Injection in GitHub repository librenms/librenms prior to 23.9.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-15
Published