Поиск уязвимостей
Количество 7
Количество 7
BDU:2025-00330
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
CVE-2024-45611
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control policy to create a private RSS feed attached to another user account and use a malicious payload to triggger a stored XSS. Upgrade to 10.0.17.
CVE-2024-45611
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control policy to create a private RSS feed attached to another user account and use a malicious payload to triggger a stored XSS. Upgrade to 10.0.17.
CVE-2024-45611
GLPI is an open-source asset and IT management software package that p ...
ROS-20250109-03
Множественные уязвимости glpi
ALT-PU-2025-1277
ALT-PU-2025-1277: package `glpi` update to version 10.0.17-alt1
ALT-PU-2025-10163
ALT-PU-2025-10163: package `glpi` update to version 10.0.19-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00330 Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 5.4 | 0% Низкий | почти 2 года назад |
 | CVE-2024-45611 GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control policy to create a private RSS feed attached to another user account and use a malicious payload to triggger a stored XSS. Upgrade to 10.0.17. | CVSS3: 5.4 | 0% Низкий | почти 2 года назад |
 | CVE-2024-45611 GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control policy to create a private RSS feed attached to another user account and use a malicious payload to triggger a stored XSS. Upgrade to 10.0.17. | CVSS3: 5.4 | 0% Низкий | почти 2 года назад |
| CVE-2024-45611 GLPI is an open-source asset and IT management software package that p ... | CVSS3: 5.4 | 0% Низкий | почти 2 года назад |
 | ROS-20250109-03 Множественные уязвимости glpi | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-1277 ALT-PU-2025-1277: package `glpi` update to version 10.0.17-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-10163 ALT-PU-2025-10163: package `glpi` update to version 10.0.19-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад |
Уязвимостей на страницу