Vulnerabilidades en Glpi-Project
182 resultadosCVE-2021-21258MEDIUMXSS injection in ajax/kanbanEPSS 0.7%CVE-2022-24868HIGHCross site scripting via SVG file upload in GLPIEPSS 0.6%CVE-2021-21325MEDIUMStored XSS in budget typeEPSS 0.6%CVE-2022-39276LOWBlind Server-Side Request Forgery (SSRF) in RSS feeds and planningEPSS 0.6%CVE-2023-22722MEDIUMglpi subject to Cross-site Scripting (XSS) - Reflected EPSS 0.6%CVE-2023-22725MEDIUMglpi vulnerable to XSS on external linksEPSS 0.6%CVE-2021-21312MEDIUMStored XSS on documentsEPSS 0.6%CVE-2021-21314MEDIUMXSS injection on ticket updateEPSS 0.6%CVE-2022-36112LOWBlind Server-Side Request Forgery (SSRF) in GLPIEPSS 0.6%CVE-2023-28636MEDIUMGLPI vulnerable to stored Cross-site Scripting in external linksEPSS 0.6%CVE-2022-41941MEDIUMglpi contains XSS Stored inside Standard Interface Help Link href attributeEPSS 0.6%CVE-2023-35939HIGHGLPI vulnerable to unauthorized access to Dashboard dataEPSS 0.6%CVE-2022-39277MEDIUMCross-Site Scripting (XSS) in external links in GLPIEPSS 0.6%CVE-2026-53625HIGHGLPI: Privilege Escalation via authtype API manipulationEPSS 0.6%CVE-2026-5385HIGHGLPI 11.0.0 - Stored XSS in knowledge baseEPSS 0.6%CVE-2023-34107MEDIUMGLPI vulnerable to unauthorized access to KnowbaseItem dataEPSS 0.6%CVE-2023-34106MEDIUMGLPI vulnerable to unauthorized access to User dataEPSS 0.6%CVE-2023-22724MEDIUMglpi contains XSS in RSS Description LinkEPSS 0.6%CVE-2026-26026CRITICALGLPI has a Server-Side Template Injection via Double-CompilationEPSS 0.5%CVE-2023-28852MEDIUMGLPI vulnerable to stored Cross-site Scripting through dashboard administrationEPSS 0.5%