PT-2025-13696 · Phpipam · Phpipam

Published 2025-03-31 · Updated 2025-03-31 · CVE-2024-55093

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpIPAM versions 1.7.3 and earlier

Description The issue is a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts. This means an attacker could potentially inject malicious scripts into the website, which would then be executed by the user's browser.

Recommendations For versions 1.7.3 and earlier, update to a version that fixes the reflected Cross-Site Scripting (XSS) vulnerability in the install scripts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-55093

Affected Products

Phpipam

References · 4

• https://github.com/phpipam/phpipam/commit/d0caaeba885364fd0521f094511c5d7b11f9da8f · Patch
• https://osv.dev/vulnerability/CVE-2024-55093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55093 · Security Note
• https://twitter.com/CVEnew/status/1906694096930136398 · Twitter Post