ALT-PU-2023-8228

Низкий

ALT-PU-2023-8228: package phpipam update to version 1.6.0-alt1

Источник

errata.altlinux.org

Дата публикации

20.12.2023

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades phpipam to version 1.6.0-alt1.

Устраненные уязвимости3

CVE-2023-24657

Средний 6.1

Дата публикации: 08.03.2023

CWE-79

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php.

CVSS 3.1

Средний 6.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

Ссылки

CVE-2023-24657 https://nvd.nist.gov/vuln/detail/CVE-2023-24657

Ссылки1

ALT-PU-2023-8228 https://errata.altlinux.org/ALT-PU-2023-8228

Связанные уязвимости

CVE-2023-24657

CVSS3: 6.1

nvd

больше 3 лет назад

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php.

CVE-2023-24657

CVSS3: 6.1

debian

больше 3 лет назад

phpipam v1.6 was discovered to contain a reflected cross-site scriptin ...

GHSA-m5cp-j2v2-pcm9

CVSS3: 6.1

github

больше 3 лет назад

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php.

CVE-2024-10727

CVSS3: 6.1

nvd

больше 1 года назад

A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user.

CVE-2024-10727

CVSS3: 6.1

debian

больше 1 года назад

A reflected cross-site scripting (XSS) vulnerability exists in phpipam ...