CVE-2021-21314

Опубликовано: 03 мар. 2021

Источник: nvd

CVSS3: 5.4

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket.

Ссылки

https://github.com/glpi-project/glpi/releases/tag/9.5.4
Release Notes
Third Party Advisory
https://github.com/glpi-project/glpi/security/advisories/GHSA-2w7j-xgj7-3xgg
Third Party Advisory
https://github.com/glpi-project/glpi/releases/tag/9.5.4
Release Notes
Third Party Advisory
https://github.com/glpi-project/glpi/security/advisories/GHSA-2w7j-xgj7-3xgg
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

Версия до 9.5.4 (исключая)

EPSS

Процентиль: 55%

0.00321

Низкий

5.4 Medium

CVSS3

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2021-21314

CVSS3: 5.4

ubuntu

почти 5 лет назад

CVE-2021-21314

CVSS3: 5.4

debian

почти 5 лет назад

GLPI is open source software which stands for Gestionnaire Libre de Pa ...

EPSS

Процентиль: 55%

0.00321

Низкий

5.4 Medium

CVSS3

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79