CVE-2021-21258: XSS injection in ajax/kanban
Published Mar 2, 2021
·Updated
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injection vulnerability when using ajax/kanban.php. This is fixed in version 9.5.4.
Affected Software
1 affected component
GLPI-PROJECT GLPI>=9.5.0<9.5.4
Remediation
Event History
Mar 2, 2021
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-21258?
CVE-2021-21258 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2021-21258?
To fix CVE-2021-21258, upgrade GLPI to version 9.5.4 or later.
3
What versions of GLPI are affected by CVE-2021-21258?
GLPI versions 9.5.0 through 9.5.3 are affected by CVE-2021-21258.
4
What type of vulnerability is CVE-2021-21258?
CVE-2021-21258 is a cross-site scripting (XSS) injection vulnerability.
5
Where can I find more information about CVE-2021-21258?
More information about CVE-2021-21258 can be found in the official GLPI repositories and advisories.