Количество 5
Количество 5
CVE-2024-27104
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13.
CVE-2024-27104
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13.
CVE-2024-27104
GLPI is a Free Asset and IT Management Software package, Data center m ...
ROS-20240503-06
Уязвимость glpi
BDU:2024-03510
Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильной нейтрализацией ввода во время создания веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-27104 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13. | CVSS3: 4.5 | 0% Низкий | больше 1 года назад |
 | CVE-2024-27104 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13. | CVSS3: 4.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-27104 GLPI is a Free Asset and IT Management Software package, Data center m ... | CVSS3: 4.5 | 0% Низкий | больше 1 года назад |
 | ROS-20240503-06 Уязвимость glpi | CVSS3: 4.5 | 0% Низкий | около 1 года назад |
 | BDU:2024-03510 Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильной нейтрализацией ввода во время создания веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 4.5 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу