Approved changes feed: RSS · Atom

cpe:2.3:a:glpi-project:glpi:10.0.0:rc2:*:*:*:*:*:*

part: a version: 10.0.0 update: rc2

VendorGlpi Project (bef553f0-49a5-5069-ba42-78448263cef9)
ProductGlpi (5fde319e-7958-54ba-bdc3-1448651b65ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/mrlioncub/glpi purl2cpe 2026-06-01 10:15:46.950675
pkg:github/glpi-project/glpi purl2cpe 2026-06-01 10:15:46.950676

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29250 vulnerable 2026-06-03 14:46:57.493228 SQL injection in GLPI
HIGH (8.1)
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to version 10.0.1 it is possible to add extra information by SQL injection on search pages. In order to exploit this vulnerability a user must be logged in.
Published: 2022-06-09T19:55:12.000Z
Updated: 2025-04-23T18:17:31.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24876 vulnerable 2026-06-03 14:46:36.504211 Stored cross site scrpting in GLPI's Kanban
MEDIUM (5.4)
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scripting vulnerability in Kanban by injecting HTML code in its user name. Users are advised to upgrade. There are no known workarounds for this issue.
Published: 2022-06-09T18:50:25.000Z
Updated: 2025-04-23T18:18:05.307Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.