CVE-2024-47759
CVSS 3.1 Score 0 of 10 (low)
Details
Published Nov 15, 2024
CWE ID 79
Summary
CVE-2024-47759 is a vulnerability affecting GLPI, a free Asset and IT management software. An attacker can exploit this issue by uploading a malicious SVG file, which contains a script. The script gets executed when any user attempts to view the document contents. To mitigate this risk, it is recommended to upgrade to GLPI version 10.0.17 as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GLPI Project
Affected Vendors
- Teclib