Descrição
A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter.
CVSS 6.5EPSS 0.265%Risco 0.67
Ver fonte- Publicação
- 2026-04-14 15:16:27
- Versões afetadas
- cannotmatch
- Tipo
- Core software
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N