CVE-2022-29712

Description

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters.

Affected packages (1)

• Packagist/librenms/librenmsfrom 0, < 22.4.0

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-29712
• PATCHhttps://github.com/librenms/librenms
• WEBhttps://github.com/librenms/librenms/commit/8b82341cb742e7bd4966964b399012f7ba017e0b
• WEBhttps://github.com/librenms/librenms/pull/13932