ROS-20220202-01

Vulnerability in the GLPI request and incident handling system, related to insufficient clearing of the
of user data in the reset button. Exploitation of the vulnerability could allow an attacker,
acting remotely, to force a victim to click on a specially crafted link and execute arbitrary
HTML and script code in the user’s browser in the context of a vulnerable website

Vulnerability in GLPI’s request and incident handling system, related to insufficient cleansing of
user data in the custom CSS administration form. Exploitation of the vulnerability could
Allow an attacker acting remotely to send a specially crafted query to a vulnerable application
and execute arbitrary SQL commands on the application’s database