medium4.8
CVE-2024-47759
GLPI is a free Asset and IT management software package.
Impact
GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glpi-Project | Glpi | from 9.2.0 before 10.0.17 |