Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2025-62412

LibreNMS alert-rules Cross-Site Scripting Vulnerability

Description

LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

librenms librenms

  • < 25.10.0affected

References