Skip to content
OpenAdvisories

Package · Ubuntu

glpi

195 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-37147 Public exploit

    GLPI allows Authenticated File Upload to Restricted Tickets

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to …

  • Medium 5.3
    CVE-2024-27914 Public exploit

    Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulne…