CyberRota Analysis
AI-GeneratedLibreNMS version 1.65 is vulnerable to SQL injection through the address parameter in the /ajax_table.php API endpoint, allowing remote authenticated attackers with normal privileges to extract sensitive information from the database. Organizations using this version of LibreNMS should prioritize patching this vulnerability to mitigate potential data breaches and unauthorized access to critical information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajax_table.php API endpoint.