CVE-2024-10724

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10724

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10724.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10724

Published

2025-03-20T10:15:19.390Z

Modified

2026-03-12T00:21:11.103683Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is fixed in version 1.7.0.

References

Affected packages

Git / github.com/phpipam/phpipam

Affected ranges

Type

GIT

Repo

https://github.com/phpipam/phpipam

Events

Introduced

Fixed

3271d956a581a00a7d4080426d5ca8f2c4b06102

Fixed

c1697bb6c4e4a6403d69c0868e1eb1040f98b731

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.7.0"
        }
    ]
}

Affected versions

v1.*

v1.16.003

v1.19.008

v1.2.0

v1.2.0_beta2

v1.3.0

v1.3.2

v1.4.0

v1.5.0

v1.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10724.json"