It's an auxiliary rule as a pre-match for HTTP GET SharePoint scsignup.aspx page detection, and should not be triggered.

A stored cross-site scripting vulnerability has been reported for LibreNMS. The vulnerability is due to improper input validation in the Alert Rules page. A remote, authenticated attacker could exploit the vulnerability by sending a crafted request to the target server. Successful exploits could result in arbitrary code execution in the context of the victim's browser.

An insecure deserialization vulnerability has been reported for Microsoft SharePoint. This vulnerability is due to improper input validation of the workflow rules file generated based on an Access data macro of an uploaded Access template file. A remote, authenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in the execution of code in the security context of the server process.

This script exploits that allows an unauthenticated attacker, with network access to a Management Point, to execute arbitrary SQL queries on the site database.

Threat Encyclopedia

1236160

WEB GET SharePoint scsignup.aspx state 0

High

2025/12/26

1235782

WEB LibreNMS Alert Rule Name Stored Cross-Site Scripting (CVE-2024-47525)

Medium

2025/12/26

1236161

WEB Microsoft SharePoint Workflow AccessServicesListEventReceiver Insecure Deserialization (CVE-2024-43464) state 1-F/Flow

High

2025/12/24

1236240

WEB Microsoft Configuration Manager Remote Code Execution Vulnerability -2 (CVE-2024-43468)

High

2025/12/24