CVE-2024-10722lowCWE-79

CVE-2024-10722: fallo de gravedad baja en phpipam/phpipam

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Publicada el

Seguir esta CVE+ Monitorear phpipam/phpipam

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.5epss 0.3%
A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distribution of malware, website defacement, content manipulation, and phishing attacks. The issue is fixed in version 1.7.0.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Productos afectados
phpipam · phpipam/phpipam
CVEs relacionadas — phpipam/phpipam

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-0678HIGHMissing Authorization in phpipam/phpipamEPSS 37.3%CVE-2023-1211HIGH SQL Injection in phpipam/phpipamEPSS 3.0%CVE-2023-0676LOWCross-site Scripting (XSS) - Reflected in phpipam/phpipamEPSS 1.5%CVE-2022-1225MEDIUMIncorrect Privilege Assignment in phpipam/phpipamEPSS 1.0%CVE-2022-1224MEDIUMImproper Authorization in phpipam/phpipamEPSS 1.0%CVE-2022-1223MEDIUMIncorrect Authorization in phpipam/phpipamEPSS 1.0%