Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-39213

Опубликовано: 15 сент. 2021
Источник: nvd
CVSS3: 6.8
CVSS3: 8.8
CVSS2: 6
EPSS Низкий

Описание

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Версия от 9.1 (включая) до 9.5.6 (исключая)

EPSS

Процентиль: 64%
0.01046
Низкий

6.8 Medium

CVSS3

8.8 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-74
CWE-74

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 5 лет назад

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround.

CVSS3: 8.8
debian
около 5 лет назад

GLPI is a free Asset and IT management software package. Starting in v ...

CVSS3: 8.8
altlinux
около 5 лет назад

ALT-PU-2021-3038: package `glpi` update to version 9.5.6-alt1

CVSS3: 8.8
altlinux
около 5 лет назад

ALT-PU-2021-3030: package `glpi` update to version 9.5.6-alt1

EPSS

Процентиль: 64%
0.01046
Низкий

6.8 Medium

CVSS3

8.8 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-74
CWE-74