ALT-PU-2024-2541

Высокий

ALT-PU-2024-2541: package glpi update to version 10.0.12-alt1

Источник

errata.altlinux.org

Дата публикации

18.02.2024

Дата обновления

18.02.2024

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades glpi to version 10.0.12-alt1.

Устраненные уязвимости2

CVE-2023-51446

Высокий 8.1

Дата публикации: 01.02.2024

CWE-74

CWE-90

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.

CVSS 3.1

Высокий 8.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: High
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2023-51446 https://nvd.nist.gov/vuln/detail/CVE-2023-51446

Ссылки1

ALT-PU-2024-2541 https://errata.altlinux.org/ALT-PU-2024-2541

Связанные уязвимости

ALT-PU-2024-2543

CVSS3: 8.1

altlinux

больше 2 лет назад

ALT-PU-2024-2543: package `glpi` update to version 10.0.12-alt1

ROS-20240812-13

CVSS3: 8.1

redos

около 2 лет назад

Множественные уязвимости glpi

CVE-2024-23645

CVSS3: 6.1

ubuntu

почти 3 года назад

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12.

CVE-2024-23645

CVSS3: 6.1

nvd

почти 3 года назад

GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12.

CVE-2024-23645

CVSS3: 6.1

debian

почти 3 года назад

GLPI is a Free Asset and IT Management Software package. A malicious U ...