CVE-2025-60912

phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the /app/admin/import-export/ endpoint, allows remote attackers to trigger large database dump downloads via crafted HTTP GET requests if an administrator has an active session.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 0.7 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/amandrei/a8377d9b71c55156d22aaaf485463d15	Third Party Advisory
https://github.com/phpipam/phpipam	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*

History

15 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) phpIPAM v1.7.3 contiene una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la funcionalidad de exportación de la base de datos. La función generate-mysql.php, ubicada en el endpoint /app/admin/import-export/, permite a atacantes remotos activar grandes descargas de volcado de la base de datos a través de peticiones HTTP GET manipuladas si un administrador tiene una sesión activa.

Information

Published : 2025-12-08 15:15

Updated : 2026-10-15 19:10

NVD link : CVE-2025-60912

Mitre link : CVE-2025-60912

CVE.ORG link : CVE-2025-60912

JSON object : View

Products Affected

phpipam

phpipam

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2025-60912", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-60912", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-08T17:17:37.064247Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 0.7}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-08T15:15:50.450", "references": [{"url": "https://gist.github.com/amandrei/a8377d9b71c55156d22aaaf485463d15", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/phpipam/phpipam", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the /app/admin/import-export/ endpoint, allows remote attackers to trigger large database dump downloads via crafted HTTP GET requests if an administrator has an active session."}, {"lang": "es", "value": "phpIPAM v1.7.3 contiene una vulnerabilidad de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en la funcionalidad de exportaci\u00f3n de la base de datos. La funci\u00f3n generate-mysql.php, ubicada en el endpoint /app/admin/import-export/, permite a atacantes remotos activar grandes descargas de volcado de la base de datos a trav\u00e9s de peticiones HTTP GET manipuladas si un administrador tiene una sesi\u00f3n activa."}], "lastModified": "2026-10-15T19:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECCAE1A5-738E-4649-BAF4-ACC14A8562BA", "versionEndIncluding": "1.7.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}