Beveiligingsadvies

CVE-2026-25932

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 14:31:02
Laatst bijgewerkt 2026-04-07 13:07:09
Toegewezen door GitHub_M
CVSS-score 7.2
Status PUBLISHED

Beschrijving

GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.