CVE-2019-1010307 - GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS)

Back Back to CVE browser

MEDIUM

GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS)

Published Jul 15, 2019

5.4

MEDIUM

CVSS 3.0

EPSS 0.76%

Description

GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The attack vector is: 1- User Create a ticket , 2- Admin opens another ticket and click on the "Link Tickets" feature, 3- a request to the endpoint fetches js and executes it.

Affected products

Vendor GLPI Product GLPI Product Default
n/a
- Version
  9.3.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GLPI

GLPI Product

n/a

Version	Status	Constraints
9.3.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2042
Advisory
https://github.com/glpi-project/glpi/blob/9.4/bugfixes/ajax/getDropdownValue.php
x_refsource_MISCExploitThird Party Advisory
https://github.com/glpi-project/glpi/releases/tag/9.3.1
x_refsource_MISCRelease NotesThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2042		Advisory
https://github.com/glpi-project/glpi/blob/9.4/bugfixes/ajax/getDropdownValue.php		x_refsource_MISCExploitThird Party Advisory
https://github.com/glpi-project/glpi/releases/tag/9.3.1		x_refsource_MISCRelease NotesThird Party Advisory