CVE-2024-10718

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10718

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10718.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10718

Published

2025-03-20T10:10:07.285Z

Modified

2026-07-08T06:33:59.089938091Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Cookie without Secure attribute in phpipam/phpipam

Details

In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0.

Database specific

{
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-614"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10718.json"
}

References

Affected packages

Git / github.com/phpipam/phpipam

Affected ranges

Type

GIT

Repo

https://github.com/phpipam/phpipam

Events

Introduced

Fixed

3271d956a581a00a7d4080426d5ca8f2c4b06102

Fixed

ddf70ef6801442eb8b0be5eea829e470e653c70e

Database specific

{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.7.0"
        }
    ],
    "cpe": "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*"
}

Affected versions

v1.*

v1.16.003

v1.19.008

v1.2.0_beta2

v1.3.0

v1.3.2

v1.5.0

v1.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10718.json"