glpi

Direct Vulnerabilities

Known vulnerabilities in the glpi package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Use of Hard-coded Credentials	*
M Cross-site Scripting (XSS)	*
H Arbitrary Code Injection	*
H Information Exposure	*
H SQL Injection	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
C Use of a Broken or Risky Cryptographic Algorithm	*
H Information Exposure	*
M Cross-site Scripting (XSS)	*
L Arbitrary Code Injection	*
M Weak Password Recovery Mechanism for Forgotten Password	*
M Cross-site Scripting (XSS)	*
H Information Exposure	*
C SQL Injection	*
C Access of Resource Using Incompatible Type ('Type Confusion')	*
H SQL Injection	*
M Information Exposure	<0.80.7-2
H Improper Input Validation	<0.83.91-1
M Improper Privilege Management	<0.80.7-2
H Race Condition	*
M Cross-site Scripting (XSS)	*
C SQL Injection	*
M Improper Input Validation	*
C SQL Injection	*
H SQL Injection	*
M Cross-site Scripting (XSS)	*
H Cross-site Request Forgery (CSRF)	*
C SQL Injection	*
H SQL Injection	*
M Access Restriction Bypass	*
H CVE-2015-7684	*
H Directory Traversal	*
M Access Restriction Bypass	*
M SQL Injection	*
M CVE-2013-2225	<0.83.91-1
H SQL Injection	<0.83.91-1
M Cross-site Request Forgery (CSRF)	<0.84.2-1
M Cross-site Request Forgery (CSRF)	<0.83.31-1
M Cross-site Scripting (XSS)	<0.83.31-1
M Arbitrary Code Injection	<0.80.7-1
M Information Exposure	<0.80.2-1
M Directory Traversal	*
M Link Following	*
M Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
H CVE-2008-7220	<0.72.3-1
M CVE-2007-3215	<0.68.3.2-1
M CVE-2007-2383	<0.72.3-1