GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive a SQL injection attack. Version 10.0.11 contains a patch for the issue. As a workaround, disable native inventory.
History

Tue, 19 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-12-13T18:26:35.980Z

Updated: 2024-11-19T14:17:31.449Z

Reserved: 2023-10-25T14:30:33.751Z

Link: CVE-2023-46727

cve-icon Vulnrichment

Updated: 2024-08-02T20:53:21.207Z

cve-icon NVD

Status : Modified

Published: 2023-12-13T19:15:08.047

Modified: 2024-11-21T08:29:10.210

Link: CVE-2023-46727

cve-icon Redhat

No data.