跳转到帖子

LibreNMS Authenticated RCE (CVE-2024-51092)

recommended_posts

发布于
  • Members

LibreNMS Authenticated RCE (CVE-2024-51092)

Disclosed
11/15/2024
Created
01/20/2025

Description

An authenticated attacker can create dangerous directory names on the system and alter sensitive configuration parameters through the web portal. Those two defects combined then allows to inject arbitrary OS commands inside shell_exec() calls, thus achieving arbitrary code execution.

Author(s)

  • murrant (Tony Murray)
  • Takahiro Yokoyama

Platform

Linux

Development

  • Source Code
  • History
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…