CVE-2024-10723: Stored XSS in phpipam/phpipam
A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interacts with the field. The impact of this vulnerability includes the potential theft of user cookies, unauthorized access to user accounts, and redirection to malicious websites. The issue has been fixed in version 1.7.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10723?
CVE-2024-10723 is rated as a high severity stored cross-site scripting (XSS) vulnerability.
How do I fix CVE-2024-10723?
To fix CVE-2024-10723, upgrade to phpIPAM version 1.5.3 or later where the vulnerability has been patched.
What impact does CVE-2024-10723 have on my system?
CVE-2024-10723 allows attackers to inject and execute malicious scripts within the nat tool, compromising user interactions.
Who is affected by CVE-2024-10723?
CVE-2024-10723 affects all users running phpIPAM version 1.5.2 in their environment.
How can I detect CVE-2024-10723 on my application?
You can detect CVE-2024-10723 by reviewing the input fields of the NAT tool in your phpIPAM installation for malicious script injection.