CVE-2024-27914

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the debug bar. This issue has been patched in version 10.0.13.

• CWE-79
• CWE-79

• https://github.com/glpi-project/glpi/commit/69e0dee8de0c0df139b42dbfa1a8997888c2af95Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.13Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-rcxj-fqr4-q34rVendor Advisory
• https://github.com/glpi-project/glpi/commit/69e0dee8de0c0df139b42dbfa1a8997888c2af95Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.13Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-rcxj-fqr4-q34rVendor Advisory

Published

Mar 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27909A denial of service vulnerability was reported in the HTTPS …4.9
• CVE-2024-2791The Metform Elementor Contact Form Builder plugin for WordPr…5.4
• CVE-2024-27910A vulnerability was reported in some Lenovo Printers that co…5.3
• CVE-2024-27911A vulnerability was reported in some Lenovo Printers that co…7.5
• CVE-2024-27912A denial of service vulnerability was reported in some Lenov…7.5
• CVE-2024-27913ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) throu…6.5
• CVE-2024-27915Sulu is a PHP content management system. Starting in verson …8.1
• CVE-2024-27916Minder is a software supply chain security platform. Prior t…4.3
• CVE-2024-27917Shopware is an open commerce platform based on Symfony Frame…7.5
• CVE-2024-27918Coder allows oragnizations to provision remote development e…8.2
• CVE-2024-27919Envoy is a cloud-native, open-source edge and service proxy.…7.5
• CVE-2024-2792The Elementor Addon Elements plugin for WordPress is vulnera…6.4