CVE-2024-27104 — Stored XSS in dashboards in GLPI
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and sha…
Published: 2024-03-18 · CVSS: 4.5 · CVSS 3.1
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A user with rights to create and share dashboards can build a dashboard containing javascript code. Any user that will open this dashboard will be subject to an XSS attack. This issue has been patched in version 10.0.13.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7