Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-1583

Высокий

ALT-PU-2021-1583: package glpi update to version 9.5.4-alt1

Источник
errata.altlinux.org
Дата публикации
31.03.2021
Дата обновления
31.03.2021
Устраненные уязвимости
9

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades glpi to version 9.5.4-alt1.

Устраненные уязвимости9

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 5 лет назад

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch entities with IDOR from a logged in user. This is fixed in version 9.5.4.

CVSS3: 5.7
nvd
больше 5 лет назад

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch entities with IDOR from a logged in user. This is fixed in version 9.5.4.

CVSS3: 5.7
debian
больше 5 лет назад

GLPI is an open-source asset and IT management software package that p ...

CVSS3: 5.4
ubuntu
больше 5 лет назад

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injection vulnerability when using ajax/kanban.php. This is fixed in version 9.5.4.

CVSS3: 5.4
nvd
больше 5 лет назад

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injection vulnerability when using ajax/kanban.php. This is fixed in version 9.5.4.