CVE-2020-35700 - A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint

Back Back to CVE browser

HIGH

A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint

Published Feb 8, 2021

8.8

HIGH

CVSS 3.1

EPSS 2.34%

Description

A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (8)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1095
Advisory
https://github.com/advisories/GHSA-h59f-p56g-g75v
Advisory
https://github.com/librenms/librenms/blob/master/app/Http/Controllers/Widgets/TopDevicesController.php
x_refsource_MISCThird Party Advisory
https://github.com/librenms/librenms/issues/12405
x_refsource_MISCThird Party Advisory
https://github.com/librenms/librenms/pull/12422
x_refsource_CONFIRMPatchThird Party Advisory
https://github.com/librenms/librenms/releases/tag/21.1.0
x_refsource_CONFIRMRelease NotesThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-35700
https://www.horizon3.ai/disclosures/librenms-second-order-sqli
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1095		Advisory
https://github.com/advisories/GHSA-h59f-p56g-g75v		Advisory
https://github.com/librenms/librenms/blob/master/app/Http/Controllers/Widgets/TopDevicesController.php		x_refsource_MISCThird Party Advisory
https://github.com/librenms/librenms/issues/12405		x_refsource_MISCThird Party Advisory
https://github.com/librenms/librenms/pull/12422		x_refsource_CONFIRMPatchThird Party Advisory
https://github.com/librenms/librenms/releases/tag/21.1.0		x_refsource_CONFIRMRelease NotesThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-35700
https://www.horizon3.ai/disclosures/librenms-second-order-sqli		x_refsource_MISCExploitThird Party Advisory