Lucene search
+L

2 matches found

CNNVD
CNNVD
added 2021/03/03 12:0 a.m.10 views

GLPI 跨站脚本漏洞

GLPI is an open source software for IT equipment management, developed using the PHP language. A cross-site scripting vulnerability exists in GLPI versions prior to 9.5.4 when a logged-in user is updating a work order, and no detailed vulnerability details are available at this time...

5.4CVSS5.2AI score0.00587EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/03/03 12:0 a.m.8 views

PT-2021-14412 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.4 Description: The issue involves an XSS vulnerability in GLPI, a free asset and IT management software package, where a logged-in user is affected while updating a ticket. Recommendations: For versions prior to...

10CVSS6.1AI score0.99696EPSS
SaveExploits33References127
Rows per page
Query Builder