Cloudanix VulnDB

CVE-2025-68614

Medium · 4.3

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

CVSS

4.3

EPSS

3.9%

Published

Dec 23, 2025

CISA due date

—

The record

Please find POC file here https://trendmicro-my.sharepoint.com/:u:/p/kholoud_altookhy/IQCfcnOE5ykQSb6Fm-HFI872AZ_zeIJxU-3aDk0jh_eX_NE?e=zkN76d ZDI-CAN-28575: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability -- CVSS ----------------------------------------- 4.3: AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L -- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: LibreNMS - LibreNMS -- VULNERABILITY DETAILS ------------------------ * Version tested: 25.10.0 * Installer file: NA * Platform tested: NA ---

Affected packages

Ecosystem Package Introduced Fixed
Packagist librenms/librenms 0 25.12.0

Related vulnerabilities