Ubuntu.comUB:CVE-2023-22722CVE-2023-22722
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
EPSS
Percentile
32.0%
GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and
above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker can
persuade a victim into opening a URL containing a payload exploiting this
vulnerability. After exploited, the attacker can make actions as the victim
or exfiltrate session cookies. This issue is patched in version 10.0.6.
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
EPSS
Percentile
32.0%