CVE-2024-10718mediumCWE-614

CVE-2024-10718: fallo de gravedad media en phpipam/phpipam

Cookie without Secure attribute in phpipam/phpipam

Publicada el

Seguir esta CVE+ Monitorear phpipam/phpipam

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.3%
In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
phpipam · phpipam/phpipam
CVEs relacionadas — phpipam/phpipam

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-0678HIGHMissing Authorization in phpipam/phpipamEPSS 37.3%CVE-2023-1211HIGH SQL Injection in phpipam/phpipamEPSS 3.0%CVE-2023-0676LOWCross-site Scripting (XSS) - Reflected in phpipam/phpipamEPSS 1.5%CVE-2022-1225MEDIUMIncorrect Privilege Assignment in phpipam/phpipamEPSS 1.0%CVE-2022-1224MEDIUMImproper Authorization in phpipam/phpipamEPSS 1.0%CVE-2022-1223MEDIUMIncorrect Authorization in phpipam/phpipamEPSS 1.0%