CVE-2024-47759

Publication date

2024-11-15 17:42:00

Family

GitHub_M

State

PUBLISHED

Description

GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17.