Vulnerability Database

300,991

Total vulnerabilities in the database

CVE-2022-24876

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scripting vulnerability in Kanban by injecting HTML code in its user name. Users are advised to upgrade. There are no known workarounds for this issue.

  • Published: Jun 9, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-24876
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
glpi-project / glpi 10.0.0-beta 10.0.0-beta.x
glpi-project / glpi 10.0.0-rc1 10.0.0-rc1.x
glpi-project / glpi 10.0.0-rc2 10.0.0-rc2.x
glpi-project / glpi 10.0.0-rc3 10.0.0-rc3.x
glpi-project / glpi 10.0.0 10.0.0.x