CVE-2024-41811

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41811
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41811.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41811
Aliases
Downstream
Published
2024-08-05T21:15:38Z
Modified
2025-09-19T15:05:07.038572Z
Summary
[none]
Details

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version 0.10.1 includes a fix for this. It will be published as part of the icinga-php-library v0.14.1 release.

References

Affected packages

Git / github.com/icinga/ipl-web

Affected ranges

Type
GIT
Repo
https://github.com/icinga/ipl-web
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v0.*

v0.1.0
v0.10.0
v0.2.0
v0.2.1
v0.3.0
v0.4.0
v0.5.0
v0.6.0
v0.7.0
v0.7.1
v0.8.0
v0.9.0
v0.9.1
v0.9.2