CVE-2019-12464 - CVE House

Status published High CVE-2019-12464

An issue was discovered in LibreNMS 1.50.1. An authenticated user...

7.5 CVSS

Vulnerability Description

An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in the report parameter, to cause local file inclusion resulting in code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12464

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.darkmatter.ae/xen1thlabs/librenms-limited-local-file-inclusion-via-directory-traversal-vulnerability-xl-19-019/

More from librenms

View All →

CVE-2025-68614

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Medium 4.3

CVE-2025-65093

LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint

Medium 5.5

CVE-2025-65014

LibreNMS has Weak Password Policy

Low 3.7

CVE-2025-65013

LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`

Medium 6.2

CVE-2025-62412

LibreNMS alert-rules Cross-Site Scripting Vulnerability

Low 3.8

Affected Vendor

librenms

View all reports →

Affected Software

librenms

Vulnerable Versions:

1.50.1

Timeline

Official Publish: September 9th, 2019

Last Modified: August 4th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.