Skip to content
OpenAdvisories

Vendor

GLPI

5 known vulnerabilities.

Products

glpi 2 GLPI Product 2 Reports plugin for GLPI 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-28639

    GLPI vulnerable to reflected Cross-site Scripting in search pages

    GLPI is a free asset and IT management software package. Starting in version 0.85 and prior to versions 9.5.13 and 10.0.7, a malicious link can be crafted by an unauthenticated user. It will be able to exploit a reflected XSS in case any authenticated user op…

    GLPI glpi glpi Ubuntu
  • Medium 6.1
    CVE-2022-39181

    GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS)

    GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker cau…

    GLPI Reports plugin for GLPI
  • Medium 6.0
    CVE-2020-11062

    Reflexive XSS in GLPI

    In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type. This has been fixed in version 9.4.6.

    GLPI glpi glpi Ubuntu