CVE-2022-23045

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site setti...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
web github.com