CVE-2018-18478
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-18478
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-18478.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-18478
- Aliases
- Published
- 2018-10-18T17:29:00Z
- Modified
- 2025-05-28T10:13:37.851912Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and html/includes/forms/edit-dashboard.inc.php.
- References
Affected packages
Git / github.com/librenms/librenms
Affected ranges
- Type
- GIT
- Repo
- https://github.com/librenms/librenms
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
Affected versions
0.*
0.1
1.*
1.19
1.20
1.21
1.25
1.26
1.27
1.28
1.29
1.30
1.30.01
1.31
1.31.01
1.31.02
1.31.03
1.32
1.33
1.35
1.36
1.37
1.38
1.39
1.40
1.41
1.42
1.42.01
1.43
Other
201505
201506
201507
201508
201509
201510
201511
201512
201601
201602
201603
201604
201605
201606
201607
201608
20160828
201609