CVE-2024-45609: GLPI has a Reflected XSS in /front/stat.graph.php
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages. Upgrade to 10.0.17.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45609?
CVE-2024-45609 has been classified as a moderate severity vulnerability due to the potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-45609?
To fix CVE-2024-45609, update GLPI to the latest version beyond 10.0.17 where the vulnerability is addressed.
Who is affected by CVE-2024-45609?
CVE-2024-45609 affects users of GLPI versions between 0.70 and 10.0.17.
What type of vulnerability is CVE-2024-45609?
CVE-2024-45609 is a reflected cross-site scripting (XSS) vulnerability.
Can CVE-2024-45609 be exploited by unauthenticated users?
Yes, CVE-2024-45609 can be exploited by unauthenticated users through crafted links.