CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once `icinga-php-library` is upgraded. Version 0.10.1 includes a fix for this. It will be published as part of the `icinga-php-library` v0.14.1 release.

• CWE-352

• https://github.com/Icinga/ipl-web/commit/492336fdb57a5bb0881ed642ab36f5841337571e
• https://github.com/Icinga/ipl-web/security/advisories/GHSA-w9pg-7c3h-fc8j

Published

Aug 5, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41806The Open edX Platform is a learning management platform. Ins…5.3
• CVE-2024-41807Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2024-41808The OpenObserve open-source observability platform provides …5.4
• CVE-2024-41809OpenObserve is an open-source observability platform. Starti…6.1
• CVE-2024-4181A command injection vulnerability exists in the RunGptLLM cl…8.8
• CVE-2024-41810Twisted is an event-based framework for internet application…6.1
• CVE-2024-41812txtdot is an HTTP proxy that parses only text, links, and pi…7.5
• CVE-2024-41813txtdot is an HTTP proxy that parses only text, links, and pi…7.5
• CVE-2024-41815Starship is a cross-shell prompt. Starting in version 1.0.0 …7
• CVE-2024-41816Cooked is a recipe plugin for WordPress. The Cooked plugin f…5.4
• CVE-2024-41817ImageMagick is a free and open-source software suite, used f…7.8
• CVE-2024-41818fast-xml-parser is an open source, pure javascript xml parse…7.5