Описание
GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through the Webhook feature. This issue has been patched in version 11.0.5.
Ссылки
- ProductRelease Notes
- Vendor Advisory
Уязвимые конфигурации
EPSS
4.1 Medium
CVSS3
9.1 Critical
CVSS3
Дефекты
Связанные уязвимости
GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through the Webhook feature. This issue has been patched in version 11.0.5.
GLPI is a free asset and IT management software package. From version ...
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю осуществить SSRF-атаку
EPSS
4.1 Medium
CVSS3
9.1 Critical
CVSS3