Поиск уязвимостей
Количество 7
Количество 7
BDU:2024-03510
Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильной нейтрализацией ввода во время создания веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
ROS-20240503-06
Уязвимость glpi
ALT-PU-2024-4750
ALT-PU-2024-4750: package `glpi` update to version 10.0.14-alt1
ALT-PU-2024-4487
ALT-PU-2024-4487: package `glpi` update to version 10.0.14-alt1
CVE-2024-27104
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13.
CVE-2024-27104
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13.
CVE-2024-27104
GLPI is a Free Asset and IT Management Software package, Data center m ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-03510 Уязвимость системы работы с заявками и инцидентами GLPI, связанная c неправильной нейтрализацией ввода во время создания веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 4.5 | 1% Низкий | больше 2 лет назад |
 | ROS-20240503-06 Уязвимость glpi | CVSS3: 4.5 | 1% Низкий | больше 2 лет назад |
| ALT-PU-2024-4750 ALT-PU-2024-4750: package `glpi` update to version 10.0.14-alt1 | CVSS3: 9.6 | больше 2 лет назад | |
| ALT-PU-2024-4487 ALT-PU-2024-4487: package `glpi` update to version 10.0.14-alt1 | CVSS3: 9.6 | больше 2 лет назад | |
 | CVE-2024-27104 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13. | CVSS3: 4.8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-27104 GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13. | CVSS3: 4.8 | 1% Низкий | больше 2 лет назад |
| CVE-2024-27104 GLPI is a Free Asset and IT Management Software package, Data center m ... | CVSS3: 4.8 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу