CVE-2026-25932
GLPI has Stored XSS in Supplier 'Website' field
概要
GLPI has Stored XSS in Supplier 'Website' field
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov