Security Advisory
CVE-2025-60912
3.3
LOW
Vulnerability Description
phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the /app/admin/import-export/ endpoint, allows remote attackers to trigger large database dump downloads via crafted HTTP GET requests if an administrator has an active session.
Published Date
December 8, 2025
Official Source
NIST NVD Advisory