CVE-2023-41580

Summary

CVE-2023-41580 is a newly disclosed vulnerability affecting Phpipam before version 1.5.2. This issue involves an LDAP injection vulnerability located in the dname parameter at /users/ad-search-result.php. Attackers can exploit this flaw to enumerate arbitrary fields in an LDAP server and potentially gain unauthorized access to sensitive data. The vulnerability can be exploited through a carefully crafted POST request. Organizations running affected versions of Phpipam are urged to update immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.