CVE-2023-5591

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

SQL Injection in GitHub repository librenms/librenms prior to 23.10.0.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
librenmslibrenms/librenms>= unspecified, < 23.10.0

References

Timeline

Published
Oct 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-55927.5Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthentCVE-2023-55937.8The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticatedCVE-2023-55948.6Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using thCVE-2023-55955.5Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.CVE-2023-55975.4A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERCVE-2023-55985.4Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCECVE-2023-55995.4A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERCVE-2023-56003.1An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16CVE-2023-56019.8The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthentiCVE-2023-56028.8The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up toCVE-2023-56049.8The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecurCVE-2023-56054.8The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow high privilege users s
CVE-2023-5591: Medium severity, CVSS 6.5 | Vulnix