CVE-2022-41941
glpi contains XSS Stored inside Standard Interface Help Link href attribute
Résumé
glpi contains XSS Stored inside Standard Interface Help Link href attribute
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov