5 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-22725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability...
CVE-2023-22725
GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6...
Security fix for the ALT Linux 10 package glpi version 9.5.12-alt1
9.5.12-alt1 built March 22, 2023 Pavel Zilke in task 316955 March 18, 2023 Pavel Zilke - New version 9.5.12 - This release fixes several security issues that has been recently discovered. Update is recommended! - Security fixes: + CVE-2023-22722 : XSS on browse views + CVE-2023-22725 : XSS on...
CVE-2023-22725 glpi vulnerable to XSS on external links
GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6...
CVE-2023-22725
CVE-2023-22725 affects GLPI (Free Asset and IT Management Software). Vulnerability: Cross-site Scripting in versions 0.6.0 and above, prior to 10.0.6, allowing an administrator to create a malicious external link. Root cause details are not fully elaborated beyond this description. Impact: user-f...