CVE-2023-22725
glpi vulnerable to XSS on external links
Résumé
glpi vulnerable to XSS on external links
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov