Tony Murray d3b51560a8 Fix device group stored XSS (#16442) ...

https://github.com/librenms/librenms/security/advisories/GHSA-fc38-2254-48g7

2024-09-28 19:37:46 +01:00

..

apps

Remove global $var access functions (#16345)

2024-09-03 19:41:13 +02:00

bill

Switch bill notes to textarea (#15749)

2024-01-15 22:35:44 +00:00

device

Improved module controls (#16372)

2024-09-09 09:09:19 +02:00

health

Fix health temperature degree display (#15541)

2023-11-01 20:35:35 +01:00

peering

…

ports

add in/out erros to port table (#16073)

2024-07-26 09:09:38 -05:00

routing

Fix Vrf Table (#15912)

2024-03-28 22:50:12 +01:00

search

Fix SQL injection issues in packages search (#15950)

2024-04-17 02:32:35 +02:00

tools

…

wireless

Fix unsanitized input injection (#15184)

2023-08-02 10:37:22 -05:00

addhost.inc.php

Remove legacy addhost code (#15376)

2023-10-07 22:02:45 -05:00

addsrv.inc.php

…

alert-log.inc.php

…

alert-rules.inc.php

…

alert-schedule.inc.php

…

alert-stats.inc.php

…

alert-transports.inc.php

Fix popup toast messages (Remove Flasher) (#16090)

2024-06-05 08:07:42 -05:00

alerts.inc.php

…

api-access.inc.php

Fix XSS in api access (#14551)

2022-11-01 11:20:08 +01:00

api-docs.inc.php

…

apps.inc.php

add missing graphs for NFS app page (#16197)

2024-07-13 22:21:11 +02:00

availability-map.inc.php

…

bill.inc.php

Stop showing bills that do not exist (#16423)

2024-09-25 14:45:57 +02:00

bills.inc.php

…

customers.inc.php

…

delhost.inc.php

Update delhost.inc.php (#15130)

2023-07-01 14:17:40 -05:00

device-dependencies.inc.php

show id on device dependencies (#14497)

2022-10-22 19:52:51 +02:00

devices.inc.php

Fix device group stored XSS (#16442)

2024-09-28 19:37:46 +01:00

edituser.inc.php

…

eventlog.inc.php

Fix another addcslashes incorrect escape in eventlog (#15313)

2023-09-14 00:07:08 -05:00

fullscreenmap.inc.php

…

graphs.inc.php

Implement RBAC (only built in roles) (#15212)

2023-08-28 00:13:40 -05:00

graylog.inc.php

…

health.inc.php

Apply fixes from StyleCI (#15698)

2024-01-04 22:39:12 -06:00

iftype.inc.php

Fix check rrd file exists with remote rrdcached (#14690)

2022-12-01 08:20:49 -06:00

map.inc.php

…

notifications.inc.php

Fix possible RSS XSS (#14457)

2022-10-14 13:24:22 -05:00

outages.inc.php

Fix unsanitized input injection (#15184)

2023-08-02 10:37:22 -05:00

oxidized.inc.php

Stop Oxidized page from refreshing (#15831)

2024-02-17 15:32:21 +00:00

packages.inc.php

…

peering.inc.php

…

ports.inc.php

Fix injection vulnerability in ports pages (#15314)

2023-09-14 00:19:12 -05:00

pseudowires.inc.php

Fix pseudowires pages (#14441)

2022-10-11 16:09:59 -05:00

ripenccapi.inc.php

Fix for RIPE NCC API Tools (#14757)

2022-12-24 22:36:26 +00:00

routing.inc.php

Misc webui code cleanups (#14242)

2022-08-30 12:55:37 -05:00

search.inc.php

Apply fixes from StyleCI (#15698)

2024-01-04 22:39:12 -06:00

services.inc.php

sort services by type and name (#15367)

2023-10-04 01:40:53 -05:00

syslog.inc.php

Remove some lightly used or unused dbFacile functions (#15418)

2023-10-12 09:15:03 -05:00

templates.inc.php

…

tools.inc.php

…

wireless.inc.php

Apply fixes from StyleCI (#15698)

2024-01-04 22:39:12 -06:00