CVE-2026-22044

Опубликовано: 04 фев. 2026

Источник: nvd

CVSS3: 6.5

CVSS3: 8.8

EPSS Низкий

Описание

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23.

Ссылки

https://github.com/glpi-project/glpi/releases/tag/10.0.23
Product
Release Notes
https://github.com/glpi-project/glpi/security/advisories/GHSA-569q-j526-w385
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

Версия от 0.85 (включая) до 10.0.23 (исключая)

EPSS

Процентиль: 13%

0.00044

Низкий

6.5 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVE-2026-22044

CVSS3: 6.5

ubuntu

около 2 месяцев назад

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23.

CVE-2026-22044

CVSS3: 6.5

debian

около 2 месяцев назад

GLPI is a free asset and IT management software package. From version ...

ROS-20260319-73-0031

CVSS3: 8.8

redos

8 дней назад

Уязвимость glpi

EPSS

Процентиль: 13%

0.00044

Низкий

6.5 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-89