Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-28639
HistoryApr 05, 2023 - 12:00 a.m.

CVE-2023-28639

2023-04-0500:00:00
ubuntu.com
ubuntu.com
18
glpi
asset management
it management
software package
unauthenticated user
reflected xss
unix

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

42.0%

JSON

GLPI is a free asset and IT management software package. Starting in
version 0.85 and prior to versions 9.5.13 and 10.0.7, a malicious link can
be crafted by an unauthenticated user. It will be able to exploit a
reflected XSS in case any authenticated user opens the crafted link. This
issue is fixed in versions 9.5.13 and 10.0.7.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchglpi< anyUNKNOWN

Related

cvelist 1
osv 1
nvd 1
prion 1
cve 1
freebsd 1
redos 1
cvelist
cvelist
CVE-2023-28639 GLPI vulnerable to reflected Cross-site Scripting in search pages
2023-04-05 00:00:00
osv
osv
CVE-2023-28639
2023-04-05 18:15:08
nvd
nvd
CVE-2023-28639
2023-04-05 18:15:08
prion
prion
Cross site scripting
2023-04-05 18:15:00
cve
cve
CVE-2023-28639
2023-04-05 18:15:08
freebsd
freebsd
glpi -- multiple vulnerabilities
2023-03-20 00:00:00
redos
redos
ROS-20230619-01
2023-06-19 00:00:00

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

42.0%

JSON
Related for UB:CVE-2023-28639
cvelist1osv1nvd1prion1cve1freebsd1redos1