Описание
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched in version 10.0.9.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| glpi | removed | package |
Примечания
https://github.com/glpi-project/glpi/security/advisories/GHSA-46gp-f96h-53w4
Only supported behind an authenticated HTTP zone
EPSS
Связанные уязвимости
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched in version 10.0.9.
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched in version 10.0.9.
Уязвимость программного обеспечения для управления активами и центрами обработки данных GLPI, связанная с недостаточной защитой структуры SQL-запросов, позволяющая нарушителю выполнить произвольные SQL-запросы
EPSS