CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2024-10727

A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user.

Score
6.1 medium
Published
2025-03-20
Links
NVD · cve.org

Matched ports (1)

PortPackageVersionStatusMaintainer
net-mgmt/phpipamphpipam1.6.0unaddressedjake@xz.cx

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>phpipam</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A reflected cross-site scripting (XSS) vulnerability exists in
	phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises
	when the application receives data in an HTTP request and includes
	that data within the immediate response in an unsafe manner. This
	allows an attacker to execute arbitrary JavaScript in the context of
	the user's browser, potentially leading to full compromise of the
	user.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2024-10727</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2024-10727</url>
    </references>
    <dates>
      <discovery>2025-03-20</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>