Glpi-Project GLPI

• CVE-2023-41323 Medium 5.3 Users login enumeration by unauthenticated user in GLPI 33.9%
• CVE-2023-41322 Medium 4.9 Privilege Escalation from technician to super-admin in GLPI 0.9%
• CVE-2023-41321 Medium 4.9 Sensitive fields enumeration through API in GLPI 0.9%
• CVE-2023-41320 High 8.1 Account takeover via SQL Injection in UI layout preferences in GLPI 36.2%
• CVE-2023-37278 Medium 6.8 GLPI vulnerable to SQL injection via dashboard administration 0.7%
• CVE-2023-36808 High 8.6 GLPI vulnerable to SQL injection through Computer Virtual Machine information 47.6%
• CVE-2023-35940 High 7.5 GLPI vulnerable to unauthenticated access to Dashboard data 0.7%
• CVE-2023-35939 High 8.1 GLPI vulnerable to unauthorized access to Dashboard data 0.6%
• CVE-2023-35924 High 8.6 GLPI vulnerable to SQL injection via inventory agent request 52.4%
• CVE-2023-34244 Medium 6.5 GLPI vulnerable to reflected XSS in search pages 0.5%
• CVE-2023-34107 Medium 6.5 GLPI vulnerable to unauthorized access to KnowbaseItem data 0.6%
• CVE-2023-34106 Medium 6.5 GLPI vulnerable to unauthorized access to User data 0.6%
• CVE-2023-28852 Medium 4.8 GLPI vulnerable to stored Cross-site Scripting through dashboard administration 0.5%
• CVE-2023-28849 Critical 10.0 GLPI vulnerable to SQL injection and Stored XSS via inventory agent request 0.5%
• CVE-2023-28838 Critical 9.6 GLPI vulnerable to SQL injection through dynamic reports 0.8%
• CVE-2023-28636 Medium 4.5 GLPI vulnerable to stored Cross-site Scripting in external links 0.6%
• CVE-2023-28634 High 8.8 GLPI vulnerable to Privilege Escalation from Technician to Super-Admin 0.8%
• CVE-2023-28633 Low 3.5 GLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feeds 0.5%
• CVE-2023-28632 High 8.1 GLPI vulnerable to account takeover by authenticated user 0.7%
• CVE-2022-41941 Medium 6.2 glpi contains XSS Stored inside Standard Interface Help Link href attribute 0.6%
• CVE-2023-22500 High 7.5 glpi Unauthorized access to inventory files 0.9%
• CVE-2023-22722 Medium 6.8 glpi subject to Cross-site Scripting (XSS) - Reflected 0.6%
• CVE-2023-22724 Medium 6.2 glpi contains XSS in RSS Description Link 0.6%
• CVE-2023-22725 Medium 6.2 glpi vulnerable to XSS on external links 0.6%
• CVE-2023-23610 Medium 6.5 glpi vulnerable to Unauthorized access to data export 0.8%
• CVE-2022-39234 Medium 4.7 user session persists even after permanently deleting account in GLPI 0.5%
• CVE-2022-39277 Medium 4.5 Cross-Site Scripting (XSS) in external links in GLPI 0.7%
• CVE-2022-39262 Medium 5.2 Stored Cross-Site Scripting (XSS) on login page in GLPI 0.8%
• CVE-2022-39376 Low 2.6 Improper input validation on emails links in GLPI 0.6%
• CVE-2022-39373 Medium 4.9 Stored Cross-Site Scripting (XSS) in entity name in GLPI 0.5%
• CVE-2022-39375 Medium 4.5 Cross-Site Scripting (XSS) through public RSS feed in GLPI 0.6%
• CVE-2022-39371 High 7.5 Stored Cross-Site Scripting (XSS) through asset inventory in GLPI 0.5%
• CVE-2022-39323 High 7.4 SQL Injection on REST API in GLPI 37.4%
• CVE-2022-39372 Low 3.5 Stored Cross-Site Scripting (XSS) in user information in GLPI 0.5%
• CVE-2022-39276 Low 3.5 Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning 0.8%
• CVE-2022-39370 Medium 4.3 Improper access to debug panel in GLPI 0.5%
• CVE-2022-31187 Medium 6.8 Stored Cross Site Scripting (XSS) through global search in GLPI 0.7%
• CVE-2022-35946 Medium 5.5 SQL injection through plugin controller in GLPI 0.9%
• CVE-2022-35947 Critical 10.0 SQL injection in GLPI 1.2%
• CVE-2022-36112 Low 3.5 Blind Server-Side Request Forgery (SSRF) in GLPI 0.6%
• CVE-2022-35945 Medium 6.3 Cross site scripting (XSS) via registration API in GLPI 0.7%
• CVE-2022-31143 Medium 5.3 Leak of sensitive information through login page error in GLPI 0.9%
• CVE-2022-31061 Critical 9.8 SQL injection on login page in GLPI 51.4%
• CVE-2022-31068 Medium 5.3 Sensitive Data Exposure on Refused Inventory Files in GLPI 0.9%
• CVE-2022-31056 Critical 9.8 SQL injection with _actor parameter in GLPI 9.9%
• CVE-2022-29250 High 8.1 SQL injection in GLPI 0.8%
• CVE-2022-24876 Medium 5.4 Stored cross site scrpting in GLPI's Kanban 0.5%
• CVE-2022-24869 Medium 4.6 Cross Site Scripting in GLPI 0.8%
• CVE-2022-24868 High 7.3 Cross site scripting via SVG file upload in GLPI 0.6%
• CVE-2022-24867 High 7.5 LDAP password exposure in glpi 1.3%