VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2021· Updated Aug 3, 2024

XSS injection on ticket update

CVE-2021-21314

Description

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Glpi Project/Glpillm-fuzzy2 versions
    <9.5.4+ 1 more
    • (no CPE)range: <9.5.4
    • (no CPE)range: < 9.5.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.