CVE-2025-68614

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject HTML code. This issue has been patched in version 25.12.0.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/librenms/librenms/commit/ebe6c79bf4ce0afeb575c1285afe3934e44001f1	Patch
https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*

History

19 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) LibreNMS es una herramienta de monitorización de red de descubrimiento automático basada en PHP, MySQL y SNMP. Versiones anteriores a la versión 25.12.0, la API de reglas de alerta es vulnerable a Cross-site Scripting (XSS) almacenado. Las reglas de alerta pueden crearse o actualizarse a través de la API de LibreNMS. El nombre de la regla de alerta no se depura correctamente y puede usarse para inyectar código HTML. Este problema ha sido corregido en la versión 25.12.0.

Information

Published : 2025-12-23 00:15

Updated : 2026-10-19 22:10

NVD link : CVE-2025-68614

Mitre link : CVE-2025-68614

CVE.ORG link : CVE-2025-68614

JSON object : View

Products Affected

librenms

librenms

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-68614", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-68614", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-22T23:55:04.294873Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "librenms", "product": "librenms", "versions": [{"status": "affected", "version": "< 25.12.0"}]}]}], "published": "2025-12-23T00:15:43.677", "references": [{"url": "https://github.com/librenms/librenms/commit/ebe6c79bf4ce0afeb575c1285afe3934e44001f1", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject HTML code. This issue has been patched in version 25.12.0."}, {"lang": "es", "value": "LibreNMS es una herramienta de monitorizaci\u00f3n de red de descubrimiento autom\u00e1tico basada en PHP, MySQL y SNMP. Versiones anteriores a la versi\u00f3n 25.12.0, la API de reglas de alerta es vulnerable a Cross-site Scripting (XSS) almacenado. Las reglas de alerta pueden crearse o actualizarse a trav\u00e9s de la API de LibreNMS. El nombre de la regla de alerta no se depura correctamente y puede usarse para inyectar c\u00f3digo HTML. Este problema ha sido corregido en la versi\u00f3n 25.12.0."}], "lastModified": "2026-10-19T22:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED5356AB-8E48-4253-BE31-185FCAB75313", "versionEndExcluding": "25.12.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}