phpipam 1.6 vulnerable to Cross Site Scripting (XSS)
CVE-2024-41353

7.1HIGH

Key Information:

Vendor

phpipam

Status
PHPipam
Vendor
CVE Published:
26 July 2024

What is CVE-2024-41353?

The phpIPAM application version 1.6 is susceptible to a Cross Site Scripting (XSS) vulnerability located in the edit-group.php file. This flaw could allow an attacker to inject malicious scripts into the web application, potentially compromising the security of users interacting with it. Proper input validation and sanitization measures should be implemented to mitigate this risk.

References

https://github.com/phpipam/phpipam/issues/4147

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.