VDB

CVE-2021-21258

CVE-2021-21258 PUBLISHED CVSS 6.800000190734863 MEDIUM

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injection vulnerability when using ajax/kanban.php. This is fixed in version 9.5.4.

EPSS 0.65% · 48.6th percentile

Risk Scores

CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
EPSS Score
0.65%
48.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSglpi0, 0.84.8+dfsg.1-1, 0.84.8+dfsg.1-1ubuntu1

Timeline

  • Mar 2, 2021 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 28, 2021 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Nov 8, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›