Lucene search
PRIOn knowledge basePRION:CVE-2022-24868HistoryApr 21, 2022 - 5:15 p.m.
Cross site scripting
2022-04-2117:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
19.4%
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can exploit a lack of sanitization on SVG file uploads and inject javascript into their user avatar. As a result any user viewing the avatar will be subject to a cross site scripting attack. Users of GLPI are advised to upgrade. Users unable to upgrade should disallow SVG avatars.
Related
osv
osv
CVE-2022-24868
2022-04-21 17:15:08
nvd
nvd
CVE-2022-24868
2022-04-21 17:15:08
ubuntucve
ubuntucve
CVE-2022-24868
2022-04-21 00:00:00
cve
cve
CVE-2022-24868
2022-04-21 17:15:08
cvelist
cvelist
CVE-2022-24868 Cross site scripting via SVG file upload in GLPI
2022-04-21 16:55:11
altlinux
altlinux
Security fix for the ALT Linux 9 package glpi version 9.5.8-alt1
2022-07-11 00:00:00
Security fix for the ALT Linux 10 package glpi version 9.5.8-alt1
2022-07-07 00:00:00
redhatcve
redhatcve
CVE-2022-24868
2022-05-20 22:50:33