Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-w5bg-g2j5-7qh2
Vulnerability ID VCID-w5bg-g2j5-7qh2
Aliases CVE-2023-4980
GHSA-qxrq-376q-p39h
Summary Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00037 https://api.first.org/data/v1/epss?cve=CVE-2023-4980
cvssv3.1 5.4 https://github.com/librenms/librenms
generic_textual MODERATE https://github.com/librenms/librenms
cvssv3 8.8 https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
cvssv3.1 5.4 https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
generic_textual MODERATE https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
ssvc Track https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
cvssv3 8.8 https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
cvssv3.1 5.4 https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
generic_textual MODERATE https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
ssvc Track https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
cvssv3.1 5.4 https://nvd.nist.gov/vuln/detail/CVE-2023-4980
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2023-4980
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-4980
https://nvd.nist.gov/vuln/detail/CVE-2023-4980
470b9b13-b7fe-4b3f-a186-fdc5dc193976 https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
cfd642be6a1e988453bd63069d17db3664e7de97 https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
GHSA-qxrq-376q-p39h https://github.com/advisories/GHSA-qxrq-376q-p39h
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/librenms/librenms
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-20T17:28:54Z/ Found at https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-20T17:28:54Z/ Found at https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-4980
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.11462
EPSS Score 0.00037
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:25:14.753631+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/4xxx/CVE-2023-4980.json 38.6.0