← CVE Intelligence

CVE-2024-53850

The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation PUBLISHED

Description (CNA)

The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name) in GLPI.

Affected (CNA)

Vendor / productVersions
pluginsGLPI / addressingaffected >= 3.0.0 < 3.0.3

CWE

CWE-470

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.