ROS-20250109-03

🗓️ 09 Jan 2025 00:00:00Reported by RedosType

redos

redos🔗 redos.red-soft.ru👁 16 Views

GLPI system vulnerabilities include SQL injection, access control flaws, and insufficient data cleansing.

Reporter	Title	Published	Views	Family All 226
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to improper session management, allows a malicious actor to gain full access to the application.	8 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows a perpetrator to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the password restoration function in systems for job requests, incidents, and computer equipment inventory management allows a hacker to circumvent existing security restrictions.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface of the GLPI system for managing requests, incidents, and inventory of computer equipment allows a perpetrator to disclose confidential information.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to improper access control, allows a intruder to gain unauthorized access to the account.	18 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows a malicious actor to carry out XSS attacks.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows a malicious attacker to carry out XSS attacks.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows a malicious attacker to carry out XSS attacks.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows a malicious attacker to carry out XSS attacks.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows a malicious attacker to carry out XSS attacks.	16 Jan 202500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	glpi	10.0.17-1	UNKNOWN

09 Jan 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.1 - 8.8

CVSS 49.3

EPSS0.19755

SSVC

glpi vulnerabilities sql injection unauthorized access access control flaws password recovery issues data cleansing problems cross-site scripting.