ROS-20240726-01
Discription

A vulnerability in GLPI's request and incident handling system is related to improper input validation. Exploitation of the vulnerability could allow an attacker acting remotely to impact the system integrity A vulnerability in the GLPI request and incident handling system is associated with the introduction of malicious code by an administrator. by an administrator. Exploitation of the vulnerability could allow an attacker acting remotely to inject malicious code into accounts A vulnerability in the GLPI request and incident handling system is related to the failure to take measures to protect the structure of a web page. of the web page. Exploitation of the vulnerability could allow an attacker acting remotely to perform a cross-site scripted attack. Cross-site scripting attacks Vulnerability in GLPI's request and incident handling system is related to configuration passing in javascript Some entries are filtered, but the ldap_pass variable is not filtered. Exploitation of the vulnerability could allow an attacker acting remotely to learn the password for root dn A vulnerability in the GLPI request and incident handling system is related to the use of ticketing actions or the customizing login messages with a stylesheet reference. Exploitation of the vulnerability could allow an an attacker acting remotely to conduct a cross-site scripting attack A vulnerability in the GLPI request and incident handling system is related to the fact that the registration key, is not…Read More

Back to Main

Subscribe for the latest news: