CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
A vulnerability in the GLPI plugin that allows the creation of custom Formcreator forms is related to the
the use of ###FULLFORM###
for rendering. Exploitation of the vulnerability could allow an attacker,
acting remotely, to execute arbitrary javascript code
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
redos | 7.3 | x86_64 | glpi-plugin-formcreator | < 2.13.6-1 | UNKNOWN |