Linux Distros Unpatched Vulnerability : CVE-2021-21258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from...

Security fix for the ALT Linux 10 package glpi version 9.5.4-alt1

March 31, 2021 Pavel Zilke 9.5.4-alt1 - New version 9.5.4 - This is a security release, upgrading is recommended - Security fixes: + CVE-2021-21326 : Horizontal Privilege Escalation + CVE-2021-21255 : entities switch IDOR + CVE-2021-21258 : XSS injection in ajax/kanban + CVE-2021-21314 : XSS...

CVE-2021-21258

CVE-2021-21258 affects GLPI prior to 9.5.4: a cross-site scripting (XSS) vulnerability in ajax/kanban.php allows injection of script via user-provided input. The issue originates from insufficient input sanitization and is fixed in GLPI version 9.5.4. Affected range is GLPI 9.5.0–9.5.3; GLPI 9.5....