Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-3486
6.1
MEDIUMCVSS v3
Severity scale
010
Description
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.= 9.5.4NVD
glpi
NPM
