2 results · Clear filters · Feed
-
Medium 4.3CVE-2024-37147 Public exploit
GLPI allows Authenticated File Upload to Restricted Tickets
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to …
-
Medium 5.3CVE-2024-27914 Public exploit
Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulne…