Security Advisory

CVE-2020-27663

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-11-26 16:49:03

Last updated 2024-08-04 16:18:45

Assigner mitre

State PUBLISHED

Description

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).

← Browse all CVEs View on cve.org ↗