CVE-2023-22725

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-227268.8act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does no CVE-2023-227279.8CakePHP is a development framework for PHP web apps. In affected versions the `Cake\Database\Query::limit()` and `Cake\Database\Query::offse CVE-2023-227284.3Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.CVE-2023-227296.1Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.CVE-2023-22737.5Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from CVE-2023-227307.5Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same lin CVE-2023-227318.8Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**,CVE-2023-227329.8Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiration was set to one wee CVE-2023-227336.5Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all CVE-2023-227347.5Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validation was not checked CVE-2023-227354.6Zulip is an open-source team collaboration tool. In versions of zulip prior to commit `2f6c5a8` but after commit `04cf68b` users could uploa CVE-2023-227368.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and ve