| Package | Affected versions | Patched versions |
|---|---|---|
| glpi | ≥ 9.2.0, < 10.0.17 | 10.0.17 |
GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free