Поиск уязвимостей
Количество 7
Количество 7
BDU:2025-00332
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
CVE-2024-45610
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form. Upgrade to 10.0.17.
CVE-2024-45610
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form. Upgrade to 10.0.17.
CVE-2024-45610
GLPI is an open-source asset and IT management software package that p ...
ROS-20250109-03
Множественные уязвимости glpi
ALT-PU-2025-1277
ALT-PU-2025-1277: package `glpi` update to version 10.0.17-alt1
ALT-PU-2025-10163
ALT-PU-2025-10163: package `glpi` update to version 10.0.19-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00332 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 5.4 | 0% Низкий | почти 2 года назад |
 | CVE-2024-45610 GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form. Upgrade to 10.0.17. | CVSS3: 6.1 | 0% Низкий | почти 2 года назад |
 | CVE-2024-45610 GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form. Upgrade to 10.0.17. | CVSS3: 6.1 | 0% Низкий | почти 2 года назад |
| CVE-2024-45610 GLPI is an open-source asset and IT management software package that p ... | CVSS3: 6.1 | 0% Низкий | почти 2 года назад |
 | ROS-20250109-03 Множественные уязвимости glpi | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-1277 ALT-PU-2025-1277: package `glpi` update to version 10.0.17-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-10163 ALT-PU-2025-10163: package `glpi` update to version 10.0.19-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад |
Уязвимостей на страницу