Описание
GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Software form. Upgrade to 10.0.17.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
6.5 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
Связанные уязвимости
GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Software form. Upgrade to 10.0.17.
GLPI is a free asset and IT management software package. An unauthenti ...
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
EPSS
6.5 Medium
CVSS3
6.1 Medium
CVSS3