Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-dmsz-ct8c-zuf9
Vulnerability ID VCID-dmsz-ct8c-zuf9
Aliases CVE-2024-49758
GHSA-c86q-rj37-8f85
Summary LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can add Notes to a device, the application did not properly sanitize the user input, when the ExamplePlugin enable, if java script code is inside the device's Notes, its will be trigger. This vulnerability is fixed in 24.10.0.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00074 https://api.first.org/data/v1/epss?cve=CVE-2024-49758
cvssv3.1 6.8 https://github.com/librenms/librenms
generic_textual MODERATE https://github.com/librenms/librenms
cvssv3.1 4.8 https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
cvssv3.1 6.8 https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
generic_textual MODERATE https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
ssvc Track https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
cvssv3.1 4.8 https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
cvssv3.1 6.8 https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
generic_textual MODERATE https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
ssvc Track https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
cvssv3.1 6.8 https://nvd.nist.gov/vuln/detail/CVE-2024-49758
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2024-49758
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-49758
https://nvd.nist.gov/vuln/detail/CVE-2024-49758
24b142d753898e273ec20b542a27dd6eb530c7d8 https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
GHSA-c86q-rj37-8f85 https://github.com/advisories/GHSA-c86q-rj37-8f85
GHSA-c86q-rj37-8f85 https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T18:51:55Z/ Found at https://github.com/librenms/librenms/commit/24b142d753898e273ec20b542a27dd6eb530c7d8
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T18:51:55Z/ Found at https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-49758
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.22367
EPSS Score 0.00074
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:31:05.989967+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2024/49xxx/CVE-2024-49758.json 38.6.0