CVE-2025-65013

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a reflected cross-site scripting (XSS) vulnerability was identified in the LibreNMS application at the /maps/nodeimage endpoint. The Image Name parameter is reflected in the HTTP response without proper output encoding or sanitization, allowing an attacker to craft a URL that, when visited by a victim, causes arbitrary JavaScript execution in the victim’s browser. This issue has been patched in version 25.11.0.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.7 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x	Vendor Advisory
https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*

History

19 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) LibreNMS es una herramienta de monitoreo de red de autodescubrimiento basada en PHP/MySQL/SNMP. Versiones anteriores a la versión 25.11.0, se identificó una vulnerabilidad de cross-site scripting (XSS) reflejado en la aplicación LibreNMS en el endpoint /maps/nodeimage. El parámetro Image Name se refleja en la respuesta HTTP sin la codificación de salida o sanitización adecuadas, lo que permite a un atacante crear una URL que, cuando es visitada por una víctima, provoca la ejecución arbitraria de JavaScript en el navegador de la víctima. Este problema ha sido parcheado en la versión 25.11.0.

Information

Published : 2025-11-18 23:15

Updated : 2026-10-19 13:10

NVD link : CVE-2025-65013

Mitre link : CVE-2025-65013

CVE.ORG link : CVE-2025-65013

JSON object : View

Products Affected

librenms

librenms

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-65013", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65013", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-19T14:46:48.291091Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.7}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "librenms", "product": "librenms", "versions": [{"status": "affected", "version": "< 25.11.0"}]}]}], "published": "2025-11-18T23:15:56.113", "references": [{"url": "https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x", "tags": ["Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a reflected cross-site scripting (XSS) vulnerability was identified in the LibreNMS application at the /maps/nodeimage endpoint. The Image Name parameter is reflected in the HTTP response without proper output encoding or sanitization, allowing an attacker to craft a URL that, when visited by a victim, causes arbitrary JavaScript execution in the victim\u2019s browser. This issue has been patched in version 25.11.0."}, {"lang": "es", "value": "LibreNMS es una herramienta de monitoreo de red de autodescubrimiento basada en PHP/MySQL/SNMP. Versiones anteriores a la versi\u00f3n 25.11.0, se identific\u00f3 una vulnerabilidad de cross-site scripting (XSS) reflejado en la aplicaci\u00f3n LibreNMS en el endpoint /maps/nodeimage. El par\u00e1metro Image Name se refleja en la respuesta HTTP sin la codificaci\u00f3n de salida o sanitizaci\u00f3n adecuadas, lo que permite a un atacante crear una URL que, cuando es visitada por una v\u00edctima, provoca la ejecuci\u00f3n arbitraria de JavaScript en el navegador de la v\u00edctima. Este problema ha sido parcheado en la versi\u00f3n 25.11.0."}], "lastModified": "2026-10-19T13:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB2997C4-F47F-4823-8E14-6FBC84E84C74", "versionEndExcluding": "25.11.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}