PT-2018-18158 · Teclib+1 · Glpi+1

Trasher · Published 2018-03-12 · Updated 2019-01-26 · CVE-2018-7563

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.2.2

Description The issue affects the application, allowing for XSS in the query string to "front/preference.php". An attacker can create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. This can lead to actions such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.

Recommendations For GLPI versions prior to 9.2.2, update to version 9.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "front/preference.php" endpoint for users with debug privilege until a patch is applied. Avoid using the application with debug privilege enabled on untrusted networks until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2019-1122

CVE-2018-7563

MGASA-2018-0272

Affected Products

Alt Linux

Glpi

References · 16

• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7563 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/Q7TJDOAMV55BUNNNCAGCK5URQZEMUH53 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7562 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-7563 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-1122 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7563 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7563 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7563 · Security Note
• https://ubuntu.com/security/CVE-2018-7563 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0272 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0272.html · Security Note
• https://github.com/glpi-project/glpi/pull/3647 · Note
• https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7563 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2018-7563 · Note