CVE-2022-41941
glpi contains XSS Stored inside Standard Interface Help Link href attribute
概要
glpi contains XSS Stored inside Standard Interface Help Link href attribute
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov