Lucene search
FedoraCVELIST:CVE-2021-3486HistoryMay 26, 2021 - 9:33 p.m.
CVE-2021-3486
2021-05-2621:33:19
CWE-79
fedora
www.cve.org
7
glpi security
metadata vulnerability
xss attack
javascript execution
EPSS
0.001
Percentile
37.8%
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
CNA Affected
[
{
"product": "glpi",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "glpi 9.5.4"
}
]
}
]Related
altlinux
altlinux
Security fix for the ALT Linux 10 package glpi version 9.5.5-alt1
2021-05-13 00:00:00
Security fix for the ALT Linux 9 package glpi version 9.5.5-alt1
2021-06-02 00:00:00
prion
prion
Code injection
2021-05-26 22:15:00
osv
osv
CVE-2021-3486
2021-05-26 22:15:08
ubuntucve
ubuntucve
CVE-2021-3486
2021-05-26 00:00:00
nvd
nvd
CVE-2021-3486
2021-05-26 22:15:08
cve
cve
CVE-2021-3486
2021-05-26 22:15:08