A vulnerability, which was classified as critical, has been found in GLPI up to 10.0.3. Affected by this vulnerability is an unknown functionality of the component Mailto Link Handler. The manipulation leads to injection.
This vulnerability is uniquely identified as CVE-2022-39376. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-39376 | GLPI up to 10.0.3 Mailto Link injection (GHSA-6rh5-m5g7-327w / EUVD-2022-41837)
A vulnerability, which was classified as critical, has been found in GLPI up to 10.0.3. Affected by this vulnerability is an unknown functionality of the component Mailto Link Handler. The manipulation leads to injection. This…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR