CVE-2022-23045

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site setti...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
web github.com