Vulnerabilities > CVE-2023-34244 - Unspecified vulnerability in Glpi-Project Glpi

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

glpi-project

NVD

Published: 2023-07-05

Updated: 2024-11-21

Summary

GLPI is a free asset and IT management software package. Starting in version 9.4.0 and prior to version 10.0.8, a malicious link can be crafted by an unauthenticated user that can exploit a reflected XSS in case any authenticated user opens the crafted link. Users should upgrade to version 10.0.8 to receive a patch.

Vulnerable Configurations

Part	Description	Count
Application	Glpi-Project Glpi Project Glpi 9.4.0 Glpi Project Glpi 9.4.1 Glpi Project Glpi 9.4.1.1 Glpi Project Glpi 9.4.2 Glpi Project Glpi 9.4.3 Glpi Project Glpi 9.4.5 Glpi Project Glpi 9.4.6 Glpi Project Glpi 9.5.0 Glpi Project Glpi 9.5.1 Glpi Project Glpi 9.5.2 Glpi Project Glpi 9.5.3 Glpi Project Glpi 9.5.4 Glpi Project Glpi 9.5.5 Glpi Project Glpi 9.5.6 Glpi Project Glpi 9.5.7 Glpi Project Glpi 9.5.8 Glpi Project Glpi 9.5.9 Glpi Project Glpi 9.5.10 Glpi Project Glpi 9.5.11 Glpi Project Glpi 9.5.12 Glpi Project Glpi 9.5.13 Glpi Project Glpi 10.0.0 Glpi Project Glpi 10.0.1 Glpi Project Glpi 10.0.2 Glpi Project Glpi 10.0.3 Glpi Project Glpi 10.0.4 Glpi Project Glpi 10.0.5 Glpi Project Glpi 10.0.6 Glpi Project Glpi 10.0.7	36

Summary

Vulnerable Configurations

References