DEBIAN-CVE-2024-41811

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2024-41811
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-41811.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2024-41811
Upstream
Published
2024-08-05T21:15:38.673Z
Modified
2025-11-20T10:17:20.230895Z
Severity
  • 3.9 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version 0.10.1 includes a fix for this. It will be published as part of the icinga-php-library v0.14.1 release.

References

Affected packages

Debian:12 / icinga-php-library

Package

Name
icinga-php-library
Purl
pkg:deb/debian/icinga-php-library?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.1-1
0.11.0-1~exp1
0.11.0-1~exp2
0.11.1-1~exp1
0.12.0-1~exp1
0.12.0-1
0.13.0-1~exp1
0.13.0-1
0.13.1-1
0.13.2-1
0.14.0-1
0.14.1-1
0.14.2-1
0.16.0-1~exp1
0.16.1-1~exp1
0.17.0-1~exp1
0.17.0-1
0.17.1-1
0.18.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-41811.json"

Debian:13 / icinga-php-library

Package

Name
icinga-php-library
Purl
pkg:deb/debian/icinga-php-library?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.14.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-41811.json"

Debian:14 / icinga-php-library

Package

Name
icinga-php-library
Purl
pkg:deb/debian/icinga-php-library?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.14.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-41811.json"