Reflected XSS Vulnerability in GLPI Software Management by GLPI Project

CVE-2024-43417

Summary

GLPI, an open-source asset and IT management software, is susceptible to a reflected XSS vulnerability. This security flaw allows unauthenticated users to exploit the software by sending malicious links to GLPI technicians. When these links are clicked, the affected technician's session could be compromised, potentially leading to unauthorized access to sensitive data. It is crucial for users to upgrade to version 10.0.17 to mitigate this risk and enhance their system's security.

References