CVE-2022-31187

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions were found to not properly neutralize HTML tags in the global search context. Users are advised to upgrade to version 10.0.3 to resolve this issue. Users unable to upgrade should disable global search.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Sep 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-311889.8CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a CVE-2022-311895.3DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-31197.5The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could a CVE-2022-311905.3DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component f CVE-2022-311916.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-311926.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-311936.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-311947.2DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-311957.2DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImp CVE-2022-311967.5Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is tr CVE-2022-311978.0PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java CVE-2022-311987.5OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor that use the module `Go