CVE-2022-3845: phpipam Import Preview import-load-data.php cross site scripting
A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 22c797c3583001211fe7d31bccd3f1d4aeeb3bbc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-212863.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
phpipam/Import Preview Handler (app/admin/import-export/import-load-data.php)to a version that resolves this vulnerability.Fixed in 1.5.0Patch 22c797c3583001211fe7d31bccd3f1d4aeeb3bbc
Event History
Frequently Asked Questions
What is the vulnerability ID of this phpipam vulnerability?
The vulnerability ID of this phpipam vulnerability is CVE-2022-3845.
What is the affected component of this vulnerability?
The affected component of this vulnerability is the Import Preview Handler.
What is the severity of CVE-2022-3845?
The severity of CVE-2022-3845 is medium (6.1).
How can this vulnerability be exploited?
This vulnerability can be exploited through cross-site scripting (XSS) attacks.
How can I fix the phpipam vulnerability?
To fix the phpipam vulnerability, update to version 1.5.0 or later of phpipam.