A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.
cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*
5FF7D7E0-76F6-43EE-B8D7-C22D68D9FD4A
21.1.0
OR
Hi, can I please get a point of contact to report a security issue? The email address team@librenms.org is bouncing. Thanks!
security issue
This is a GitHub Issue
repo:librenms
owner:librenms
Title : security issue
Issue date:

--- start body ---
Hi, can I please get a point of contact to report a security issue? The email address team@librenms.org is bouncing. Thanks!
--- end body ---

comments :
--- start comments ---

--- end comments ---