CVE-2024-45608

GLPI has an Authenticated SQL Injection PUBLISHED

Description (CNA)

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17.

Affected (CNA)

Vendor / product	Versions
glpi-project / glpi	affected >= 9.5.0, < 10.0.17

CWE

CWE-89

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-67p8-v79j-jp86

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.