CVE-2024-43418: GLPI has multiple reflected XSS
Published Nov 15, 2024
·Updated
GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17.
Affected Software
1 affected component
GLPI-PROJECT GLPI>=0.65<10.0.17
Event History
Nov 15, 2024
CVE Published
via MITRE·06:23 PM
Data Sourced
via MITRE·06:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43418?
CVE-2024-43418 has been classified as a reflected XSS vulnerability that can allow unauthorized access to sensitive information.
2
How do I fix CVE-2024-43418?
To fix CVE-2024-43418, upgrade your GLPI installation to version 10.0.17 or later.
3
Who is affected by CVE-2024-43418?
CVE-2024-43418 affects all GLPI versions prior to 10.0.17.
4
What is the impact of CVE-2024-43418?
The impact of CVE-2024-43418 can allow an unauthenticated user to exploit a reflected XSS vulnerability.
5
What should GLPI users do regarding CVE-2024-43418?
GLPI users should immediately upgrade to version 10.0.17 to mitigate the risk associated with CVE-2024-43418.