CVE-2022-31187

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.3

Description The issue is related to the lack of neutralization of HTML tags during web page generation, which can allow a remote attacker to conduct a cross-site scripting attack. The affected versions do not properly neutralize HTML tags in the global search context.

Recommendations For versions prior to 10.0.3, upgrade to version 10.0.3 to resolve this issue. For users unable to upgrade, disable the global search as a temporary workaround.