Описание
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages. Upgrade to 10.0.17.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
6.5 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
Связанные уязвимости
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages. Upgrade to 10.0.17.
GLPI is a Free Asset and IT Management Software package, Data center m ...
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
ALT-PU-2025-1277: package `glpi` update to version 10.0.17-alt1
EPSS
6.5 Medium
CVSS3
6.1 Medium
CVSS3