{
  "cveId": "CVE-2024-41811",
  "url": "https://patchblox.com/security/cve/CVE-2024-41811",
  "summary": "CVE-2024-41811 is fixed in icinga-php-library on 1 platform, first by DEBIAN-CVE-2024-41811, released August 5, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "icinga-php-library: ipl/web is a set of common web components for php projects",
  "description": "ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once \u0060icinga-php-library\u0060 is upgraded. Version 0.10.1 includes a fix for this. It will be published as part of the \u0060icinga-php-library\u0060 v0.14.1 release.",
  "published": "2024-08-05T21:15:38Z",
  "severity": "low",
  "cvss": 3.9,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L",
  "epss": 0.00184,
  "epssPercentile": 0.08018,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "icinga-php-library",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.14.1-1",
      "fix": "DEBIAN-CVE-2024-41811",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41811",
      "released": "2024-08-05T21:15:38Z"
    },
    {
      "platform": "linux",
      "product": "icinga-php-library",
      "release": "Debian 14",
      "fixedVersion": "0.14.1-1",
      "fix": "DEBIAN-CVE-2024-41811",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41811",
      "released": "2024-08-05T21:15:38Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}