Glpi-Project: >> Glpi >> 10.0.11 Security Vulnerabilities
GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.
CVSS Score
8.8
EPSS Score
0.001
Published
2024-03-15
GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.
CVSS Score
5.9
EPSS Score
0.006
Published
2024-02-01
GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12.
CVSS Score
6.5
EPSS Score
0.006
Published
2024-02-01
Page 6