Beveiligingsadvies

CVE-2025-59935

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-16 16:34:46

Laatst bijgewerkt 2025-12-16 17:15:24

Toegewezen door GitHub_M

CVSS-score 6.5

Status PUBLISHED

Beschrijving

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch.

← Alle CVE's bekijken Bekijk op cve.org ↗