Vulnerabilities > CVE-2022-24876 - Unspecified vulnerability in Glpi-Project Glpi 10.0.0

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
glpi-project
NVD
Published: 2022-06-09
Updated: 2024-11-21

Summary

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scripting vulnerability in Kanban by injecting HTML code in its user name. Users are advised to upgrade. There are no known workarounds for this issue.

Vulnerable Configurations

Part Description Count
Application
Glpi-Project
5

References