What is GHSA-878x-85hc-gc4g?

GHSA-878x-85hc-gc4g is a security advisory published by GitHub Security Advisories with High severity. SQL Injection in LibreNMS

Which CVE IDs does GHSA-878x-85hc-gc4g cover?

GHSA-878x-85hc-gc4g covers the following CVE IDs: CVE-2019-12465. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-878x-85hc-gc4g?

GHSA-878x-85hc-gc4g has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-878x-85hc-gc4g?

GHSA-878x-85hc-gc4g affects 1 product, including: composer/librenms/librenms:\u003c 1.53.

GHSA-878x-85hc-gc4gHighCVSS 8.1

SQL Injection in LibreNMS

Vendor

GitHub Security Advisories

Published

October 11, 2019

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-12465 →

📋 Description

An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajax_rulesuggest.php?debug=1&term= request.

🎯 Affected products1

composer/librenms/librenms:< 1.53

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2019-12465
https://www.darkmatter.ae/xen1thlabs/librenms-sql-injection-vulnerability-xl-19-024/
https://github.com/advisories/GHSA-878x-85hc-gc4g