What is GHSA-4ccx-wjqp-5fww?

GHSA-4ccx-wjqp-5fww is a security advisory published by GitHub Security Advisories with Medium severity. LibreNMS Arbitrary File Read

Which CVE IDs does GHSA-4ccx-wjqp-5fww cover?

GHSA-4ccx-wjqp-5fww covers the following CVE IDs: CVE-2017-16759. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4ccx-wjqp-5fww?

GHSA-4ccx-wjqp-5fww has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

Which products are affected by GHSA-4ccx-wjqp-5fww?

GHSA-4ccx-wjqp-5fww affects 1 product, including: composer/librenms/librenms:\u003c 1.31.

GHSA-4ccx-wjqp-5fwwMediumCVSS 5.9

LibreNMS Arbitrary File Read

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

December 5, 2025

🔗 CVE IDs covered (1)

CVE-2017-16759 →

📋 Description

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.

🎯 Affected products1

composer/librenms/librenms:< 1.31

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2017-16759
https://github.com/librenms/librenms/pull/7184
https://github.com/librenms/librenms/commit/7887b2e1c7158204ac69ca43beafce66e4d3a3b4
https://github.com/librenms/librenms/commit/d3094fa6578b29dc34fb5a7d0bd6deab49ecc911
https://blog.librenms.org/2017/08/22/librenms-security-fix-during-the-installation-process
https://github.com/advisories/GHSA-4ccx-wjqp-5fww