CVE-2024-41811CWE-352

ipl/web susceptible to Cross-Site Request Forgery (CSRF)

Low · published August 5, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once `icinga-php-library` is upgraded. Version 0.10.1 includes a fix for this. It will be published as part of the `icinga-php-library` v0.14.1 release.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-08-05T20:17Z
EPSS history
Timeline
  • 05 AUG 20:17Z
    ipl/web susceptible to Cross-Site Request Forgery (CSRF)
    cvelistv5