phpipam Header redirect
CVE-2023-4965

4.8MEDIUM

Key Information:

Vendor

PHPipam

Status
phpipam
Vendor
CVE Published:
14 September 2023

What is CVE-2023-4965?

A vulnerability was found in phpipam 1.5.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Header Handler. The manipulation of the argument X-Forwarded-Host leads to open redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239732.

Affected Version(s)

phpipam 1.5.1

References

https://vuldb.com/?id.239732
vdb-entrytechnical-description
https://vuldb.com/?ctiid.239732
signaturepermissions-required
https://github.com/ctflearner/Vulnerability/blob/main/PHP...
exploit

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Affan (VulDB User)
.