Skip to content
OpenAdvisories

Archive

18 March 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-27914 Public exploit

    Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulne…