Glpi-project vulnerabilities
188 CVEs and advisories name Glpi-project as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-28852GLPI vulnerable to stored Cross-site Scripting through dashboard administration
- CVE-2023-28849GLPI vulnerable to SQL injection and Stored XSS via inventory agent request
- CVE-2023-28838GLPI vulnerable to SQL injection through dynamic reports
- CVE-2023-28636GLPI vulnerable to stored Cross-site Scripting in external links
- CVE-2023-28634GLPI vulnerable to Privilege Escalation from Technician to Super-Admin
- CVE-2023-28633GLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feeds
- CVE-2023-28632GLPI vulnerable to account takeover by authenticated user
- CVE-2022-41941glpi contains XSS Stored inside Standard Interface Help Link href attribute
- CVE-2023-22500glpi Unauthorized access to inventory files
- CVE-2023-22722glpi subject to Cross-site Scripting (XSS) - Reflected
- CVE-2023-22724glpi contains XSS in RSS Description Link
- CVE-2023-22725glpi vulnerable to XSS on external links
- CVE-2023-23610glpi vulnerable to Unauthorized access to data export
- CVE-2022-39376Improper input validation on emails links in GLPI
- CVE-2022-39375Cross-Site Scripting (XSS) through public RSS feed in GLPI
- CVE-2022-39373Stored Cross-Site Scripting (XSS) in entity name in GLPI
- CVE-2022-39372Stored Cross-Site Scripting (XSS) in user information in GLPI
- CVE-2022-39371Stored Cross-Site Scripting (XSS) through asset inventory in GLPI
- CVE-2022-39370Improper access to debug panel in GLPI
- CVE-2022-39323SQL Injection on REST API in GLPI
- CVE-2022-39277Cross-Site Scripting (XSS) in external links in GLPI
- CVE-2022-39276Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning
- CVE-2022-39262Stored Cross-Site Scripting (XSS) on login page in GLPI
- CVE-2022-39234user session persists even after permanently deleting account in GLPI
- CVE-2022-31187Stored Cross Site Scripting (XSS) through global search in GLPI
- CVE-2022-35946SQL injection through plugin controller in GLPI
- CVE-2022-35947SQL injection in GLPI
- CVE-2022-36112Blind Server-Side Request Forgery (SSRF) in GLPI
- CVE-2022-35945Cross site scripting (XSS) via registration API in GLPI
- CVE-2022-31143Leak of sensitive information through login page error in GLPI