Package phpipam updated to version 1.5.2-alt1 for branch sisyphus in task 320633.

Published: 2023-02-10

BDU:2023-01781

Уязвимость сценария app/admin/custom-fields/edit-result.php веб-приложения для управления IP-адресами phpipam, позволяющая нарушителю выполнить произвольные SQL-команды

Severity: HIGH (7.2) Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-1211

Published: 2023-02-04
Modified: 2024-11-21

CVE-2023-0676

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References:

Published: 2023-02-04
Modified: 2024-11-21

CVE-2023-0677

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References:

Published: 2023-02-04
Modified: 2024-11-21

CVE-2023-0678

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.

Severity: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References:

Published: 2023-03-07
Modified: 2024-11-21

CVE-2023-1211

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.

Severity: HIGH (7.2) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2023-03-07
Modified: 2024-11-21

CVE-2023-1212

Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.

Severity: MEDIUM (4.8) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

References:

VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla

Version: 2.1.0