Lucene search
PRIOn knowledge basePRION:CVE-2022-39375HistoryNov 03, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-11-0316:15:00
PRIOn knowledge base
www.prio-n.com
9
glpi
logic flaw
malicious code
injection
upgrade
version 10.0.4
itil
service desk
software auditing
nvd
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Users may be able to create a public RSS feed to inject malicious code in dashboards of other users. This issue has been patched, please upgrade to version 10.0.4. There are currently no known workarounds.
Related
osv
osv
CVE-2022-39375
2022-11-03 16:15:10
nvd
nvd
CVE-2022-39375
2022-11-03 16:15:10
cve
cve
CVE-2022-39375
2022-11-03 16:15:10
cvelist
cvelist
CVE-2022-39375 Cross-Site Scripting (XSS) through public RSS feed in GLPI
2022-11-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1
2022-11-04 00:00:00
Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1
2022-11-04 00:00:00