CVE-2024-32480 in the critical feed json
LibreNMS's Time-Based Blind SQL injection leads to database extraction
published 2024-04-22 2 y ago modified 2026-09-10 1 mo ago also EUVD-2024-1233 , GHSA-jh57-j3vq-h438
- cvss
- 7.2
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 20.3%
- EPSS 20.3% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to SQL injection. The `order` parameter is obtained from `$request`. After performing a string check, the value is directly incorporated into an SQL statement and concatenated, resulting in a SQL injection vulnerability. An attacker may extract a whole database this way. Version 24.4.0 fixes the issue.
Patch / fix
- packagist librenms/librenms 24.4.0
- librenms librenms 24.4.0
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
20.28% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | librenms/librenms | <24.4.0 |
24.4.0 |
Affected products
- librenms librenms
Classification
- Weakness
-
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
-
github.com
/librenms/librenms/commit/83fe4b10c440d69a47fe2f8616e290ba2bd3a27c
web, patch
-
github.com
/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438
web, exploit, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2024-32480
advisory
-
github.com
/librenms/librenms
package
Sources
- CVE List CVE-2024-32480
- GitHub Advisory GHSA-jh57-j3vq-h438
- NVD CVE-2024-32480
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.