Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vepx-waum-1bfc
Vulnerability ID VCID-vepx-waum-1bfc
Aliases CVE-2024-50352
GHSA-qr8f-5qqg-j3wg
Summary LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php A Stored Cross-Site Scripting (XSS) vulnerability in the "Services" section of the Device Overview page allows authenticated users to inject arbitrary JavaScript through the "name" parameter when adding a service to a device. This vulnerability could result in the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and enabling unauthorized actions.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.11787 https://api.first.org/data/v1/epss?cve=CVE-2024-50352
epss 0.11787 https://api.first.org/data/v1/epss?cve=CVE-2024-50352
epss 0.11787 https://api.first.org/data/v1/epss?cve=CVE-2024-50352
epss 0.11787 https://api.first.org/data/v1/epss?cve=CVE-2024-50352
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-qr8f-5qqg-j3wg
cvssv3.1 7.5 https://github.com/librenms/librenms
generic_textual HIGH https://github.com/librenms/librenms
cvssv3.1 4.8 https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
cvssv3.1 7.5 https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
generic_textual HIGH https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
ssvc Track https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
cvssv3.1 4.8 https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
cvssv3.1 7.5 https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
cvssv3.1_qr HIGH https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
generic_textual HIGH https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
ssvc Track https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2024-50352
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2024-50352
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-50352
https://github.com/librenms/librenms
https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
CVE-2024-50352 https://nvd.nist.gov/vuln/detail/CVE-2024-50352
GHSA-qr8f-5qqg-j3wg https://github.com/advisories/GHSA-qr8f-5qqg-j3wg
GHSA-qr8f-5qqg-j3wg https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L Found at https://github.com/librenms/librenms
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L Found at https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T16:11:34Z/ Found at https://github.com/librenms/librenms/commit/b4af778ca42c5839801f16ece53505bb7fa1e7bc
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L Found at https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T16:11:34Z/ Found at https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2024-50352
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.9385
EPSS Score 0.11787
Published At June 6, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:22:38.736504+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2024-50352.yml 38.6.0