Lucene search

K
freebsdFreeBSDFACCF131-00D9-11EF-92B7-589CFC023192
HistoryFeb 01, 2024 - 12:00 a.m.

GLPI -- multiple vulnerabilities

2024-02-0100:00:00
vuxml.freebsd.org
5
glpi
10.0.12
security vulnerabilities
reflected xss
ldap injection
reports pages
authentication

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

GLPI team reports:

GLPI 10.0.12 Changelog

[SECURITY - moderate] Reflected XSS in reports pages (CVE-2024-23645)
[SECURITY - moderate] LDAP Injection during authentication (CVE-2023-51446)

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchglpi< 10.0.12,1UNKNOWN

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

Related for FACCF131-00D9-11EF-92B7-589CFC023192