PT-2020-14249 · Teclib+1 · Glpi+1

Trasher · Published 2020-10-07 · Updated 2024-05-22 · CVE-2020-15177

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.5.2

Description The issue concerns insecure storage of user input into the database as url base and url base api. These settings are used throughout the application, allowing for vulnerabilities such as Cross-Site Scripting and Insecure Redirection. Since authentication is not required to make these changes, anyone could modify these fields to point to malicious websites or craft form input to trigger XSS, potentially leveraging JavaScript to steal cookies or perform actions as the user.

Recommendations For versions prior to 9.5.2, update to version 9.5.2 to resolve the issue. As a temporary workaround, consider restricting access to the install/install.php endpoint to prevent unauthorized changes to the url base and url base api settings. Avoid using the url base and url base api variables in a way that could trigger XSS until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-3130

ALT-PU-2020-3162

ALT-PU-2024-8094

CVE-2020-15177

GHSA-PRVH-9M4H-4M79

Affected Products

Alt Linux

Glpi

References · 7

• https://github.com/glpi-project/glpi/commit/a8109d4ee970a222faf48cf48fae2d2f06465796 · Patch
• https://ubuntu.com/security/CVE-2020-15177 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-15177 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15177 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15177 · Vendor Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-prvh-9m4h-4m79 · Note