PT-2022-7407 · Glpi+2 · Glpi+2

Ariane + 1 · Published 2022-04-21 · Updated 2024-07-26 · CVE-2022-24868

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.0

Description The issue is related to a lack of sanitization on SVG file uploads, allowing an attacker to inject javascript into a user's avatar. This can lead to a cross-site scripting attack when any user views the avatar. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited. The vulnerability can be exploited by uploading a specially crafted SVG file, which allows the attacker to conduct a cross-site scripting attack. Technical details about exploitation include the lack of sanitization on SVG file uploads and the ability to inject javascript into the user avatar.

Recommendations For versions prior to 10.0.0, users are advised to upgrade to a newer version. As a temporary workaround, users unable to upgrade should disallow SVG avatars to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2022-1914

ALT-PU-2022-2177

ALT-PU-2022-2221

ALT-PU-2022-2614

ALT-PU-2022-2624

ALT-PU-2022-2665

ALT-PU-2023-7633

ALT-PU-2024-8030

ALT-PU-2024-8094

BDU:2024-05819

CVE-2022-24868

GHSA-9HG4-FPWV-GX78

Affected Products

Alt Linux

Glpi

Red Os

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glpi_htmlawed_php_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24868.json · Exploit
• 🔥 https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/POC_2022-35914.sh · Exploit
• 🔥 https://github.com/Orange-Cyberdefense/CVE-repository · Exploit
• 🔥 https://github.com/cosad3s/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/cactuschibre/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/Kitsun3Sec/exploits/tree/master/cms/GLPI/GLPI-stored-XSS · Exploit
• 🔥 https://github.com/Wangyanan131/CVE-2022-31061 · Exploit
• 🔥 https://github.com/Vu0r1-sec/CVE-2022-31061 · Exploit
• https://github.com/glpi-project/glpi/commit/1aa9fcc4741a46fa5a9f11d71b409b911ffc190f · Patch
• https://osv.dev/vulnerability/CVE-2022-24868 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05819 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-24868 · Security Note
• https://github.com/glpi-project/glpi/security/advisories/GHSA-9hg4-fpwv-gx78 · Note
• https://redos.red-soft.ru/support/secure · Note