{"id":"GHSA-4ccx-wjqp-5fww","aliases":["CVE-2017-16759"],"title":"LibreNMS Arbitrary File Read","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.","severity":"medium","score":5.9,"published":"2022-05-13T01:44:10.000Z","modified":"2025-12-05T21:28:02.991Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"librenms/librenms","sources":[{"name":"OSV · GHSA-4ccx-wjqp-5fww","url":"https://osv.dev/vulnerability/GHSA-4ccx-wjqp-5fww"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.31"}],"type":"ECOSYSTEM"}],"versions":["1.19","1.20","1.20.1","1.21","1.22","1.22.01","1.23","1.24","1.25","1.26","1.27","1.28","1.29","1.30","1.30.01"],"fixed":["1.31"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-16759","https://github.com/librenms/librenms/pull/7184","https://github.com/librenms/librenms/commit/7887b2e1c7158204ac69ca43beafce66e4d3a3b4","https://github.com/librenms/librenms/commit/d3094fa6578b29dc34fb5a7d0bd6deab49ecc911","https://blog.librenms.org/2017/08/22/librenms-security-fix-during-the-installation-process","https://github.com/librenms/librenms"],"sources":[{"name":"OSV","id":"GHSA-4ccx-wjqp-5fww","modified":"2025-12-05T21:28:02.991554Z","url":"https://osv.dev/vulnerability/GHSA-4ccx-wjqp-5fww"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","score":5.9}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T19:15:31.108Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}