Описание
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| glpi | removed | package |
Примечания
Only supported behind an authenticated HTTP zone
https://github.com/Kitsun3Sec/exploits/tree/master/cms/GLPI/GLPI-stored-XSS
EPSS
Процентиль: 72%
0.01385
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 5 лет назад
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
CVSS3: 6.1
nvd
больше 5 лет назад
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
CVSS3: 6.1
altlinux
больше 5 лет назад
ALT-PU-2021-1793: package `glpi` update to version 9.5.5-alt1
EPSS
Процентиль: 72%
0.01385
Низкий