CVE-2023-4347

MediumCVSS 5.4

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

66.88%

99th percentile - higher than 99% of all known CVEs

A Cross-site Scripting (XSS) - Reflected vulnerability exists in the GitHub repository librenms/librenms prior to version 23.8.0.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to version 23.8.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.