CVE-2022-39276

🗓️ 03 Nov 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 69 Views

GLPI is a Free Asset and IT Management Software with SSRF exploit vulnerability. Upgrade to 10.0.4 to patch

Reporter	Title	Published	Views	Family All 107
ALT Linux	Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1	4 Nov 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1	4 Nov 202200:00	–	altlinux
Circl	CVE-2022-39276	3 Nov 202217:20	–	circl
CNNVD	GLPI 代码问题漏洞	3 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-39276 Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning	3 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-41780	3 Oct 202520:07	–	euvd
NVD	CVE-2022-39276	3 Nov 202214:15	–	nvd
OSV	CVE-2022-39276 Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning	3 Nov 202200:00	–	osv
OSV	UBUNTU-CVE-2022-39276	3 Nov 202214:15	–	osv
Prion	Design/Logic Flaw	3 Nov 202214:15	–	prion

NVD

Vulners

Node

glpi-project glpiRange<10.0.4

[
  {
    "vendor": "glpi-project",
    "product": "glpi",
    "versions": [
      {
        "version": "< 10.0.4",
        "status": "affected"
      }
    ]
  }
]