CVE-2024-27104

Summary

CVE-2024-27104 is a vulnerability affecting GLPI, a popular Free Asset and IT Management Software package. This issue allows a user with dashboard creation rights to inject malicious JavaScript code into a dashboard. Any user who opens the affected dashboard is at risk of experiencing a Cross-Site Scripting (XSS) attack. The vulnerability has been addressed in the latest version, 10.0.13, and users are advised to upgrade as soon as possible to mitigate risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.