Medium severity5.4NVD Advisory· Published Jun 9, 2022· Updated Jun 17, 2026
CVE-2022-24876
CVE-2022-24876
Description
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scripting vulnerability in Kanban by injecting HTML code in its user name. Users are advised to upgrade. There are no known workarounds for this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:glpi-project:glpi:10.0.0:-:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:glpi-project:glpi:10.0.0:-:*:*:*:*:*:*
- cpe:2.3:a:glpi-project:glpi:10.0.0:beta:*:*:*:*:*:*
- cpe:2.3:a:glpi-project:glpi:10.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:glpi-project:glpi:10.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:glpi-project:glpi:10.0.0:rc3:*:*:*:*:*:*
- (no CPE)range: <10.0.1
- (no CPE)range: < 10.0.1
- Range: <10.0.1
Patches
Vulnerability mechanics
References
2- github.com/glpi-project/glpi/commit/9a3c7487c8761eaa8f3b07589d6dcdfa5d1e4ed6nvdPatchThird Party Advisory
- github.com/glpi-project/glpi/security/advisories/GHSA-33g2-m556-gccrnvdThird Party Advisory
News mentions
0No linked articles in our index yet.