CVE-2022-39262

🗓️ 03 Nov 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 55 Views

GLPI Free Asset and IT Management software allows code injection on login page. Upgrade to version 10.0.4

Reporter	Title	Published	Views	Family All 107
ALT Linux	Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1	4 Nov 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1	4 Nov 202200:00	–	altlinux
Circl	CVE-2022-39262	3 Nov 202217:20	–	circl
CNNVD	GLPI 跨站脚本漏洞	3 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-39262 Stored Cross-Site Scripting (XSS) on login page in GLPI	3 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-41772	3 Oct 202520:07	–	euvd
NVD	CVE-2022-39262	3 Nov 202214:15	–	nvd
OSV	CVE-2022-39262 Stored Cross-Site Scripting (XSS) on login page in GLPI	3 Nov 202200:00	–	osv
OSV	UBUNTU-CVE-2022-39262	3 Nov 202214:15	–	osv
Prion	Design/Logic Flaw	3 Nov 202214:15	–	prion

NVD

Vulners

Node

glpi-project glpiRange0.65–10.0.4

[
  {
    "vendor": "glpi-project",
    "product": "glpi",
    "versions": [
      {
        "version": "< 10.0.4",
        "status": "affected"
      }
    ]
  }
]