CVE-2022-4069

Deeper analysis

CVE-2022-4069 is a stored cross-site scripting vulnerability (CWE-79) affecting the LibreNMS network monitoring application in versions prior to 22.10.0. The flaw resides in the web interface and permits injection of arbitrary script content that executes in the context of other users' browsers.

An authenticated administrator can supply malicious input that is later rendered for other privileged users. Successful exploitation yields limited read and write access to application data within the affected user's session, with the attack requiring both high privileges and explicit user interaction to trigger.

The referenced commits in the LibreNMS repository (8383376f1355812e09ec0c2af67f6d46891b7ba7) address the issue by sanitizing the affected input paths; operators should upgrade to release 22.10.0 or later to obtain the fix.

EPSS for the vulnerability rose from lower values to a peak of 0.8733 on 2025-12-11 before receding to the current score of 0.6309, indicating a period of increased exploitation interest well after initial disclosure.