Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 5

Количество 5

ubuntu логотип

CVE-2021-39209

около 5 лет назад

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can bypass Cross-Site Request Forgery (CSRF) protection in many places. This could allow a malicious actor to perform many actions on GLPI. This issue is fixed in version 9.5.6. There are no workarounds aside from upgrading.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2021-39209

около 5 лет назад

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can bypass Cross-Site Request Forgery (CSRF) protection in many places. This could allow a malicious actor to perform many actions on GLPI. This issue is fixed in version 9.5.6. There are no workarounds aside from upgrading.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2021-39209

около 5 лет назад

GLPI is a free Asset and IT management software package. In versions p ...

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2021-3038

около 5 лет назад

ALT-PU-2021-3038: package `glpi` update to version 9.5.6-alt1

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2021-3030

около 5 лет назад

ALT-PU-2021-3030: package `glpi` update to version 9.5.6-alt1

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-39209

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can bypass Cross-Site Request Forgery (CSRF) protection in many places. This could allow a malicious actor to perform many actions on GLPI. This issue is fixed in version 9.5.6. There are no workarounds aside from upgrading.

CVSS3: 8.8
1%
Низкий
около 5 лет назад
nvd логотип
CVE-2021-39209

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can bypass Cross-Site Request Forgery (CSRF) protection in many places. This could allow a malicious actor to perform many actions on GLPI. This issue is fixed in version 9.5.6. There are no workarounds aside from upgrading.

CVSS3: 8.8
1%
Низкий
около 5 лет назад
debian логотип
CVE-2021-39209

GLPI is a free Asset and IT management software package. In versions p ...

CVSS3: 8.8
1%
Низкий
около 5 лет назад
altlinux логотип
ALT-PU-2021-3038

ALT-PU-2021-3038: package `glpi` update to version 9.5.6-alt1

CVSS3: 8.8
около 5 лет назад
altlinux логотип
ALT-PU-2021-3030

ALT-PU-2021-3030: package `glpi` update to version 9.5.6-alt1

CVSS3: 8.8
около 5 лет назад

Уязвимостей на страницу