Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-5123

Высокий

ALT-PU-2026-5123: package glpi update to version 10.0.24-alt1

Источник
errata.altlinux.org
Дата публикации
27.03.2026
Дата обновления
23.05.2026
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades glpi to version 10.0.24-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 8.8
ubuntu
7 месяцев назад

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6.

CVSS3: 8.8
nvd
7 месяцев назад

GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6.

CVSS3: 8.8
debian
7 месяцев назад

GLPI is a free asset and IT management software package. From 10.0.0 t ...

CVSS3: 4.8
ubuntu
7 месяцев назад

GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.

CVSS3: 4.8
nvd
7 месяцев назад

GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.