Beveiligingsadvies

CVE-2022-31056

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-28 00:00:00

Laatst bijgewerkt 2025-04-23 18:06:03

Toegewezen door GitHub_M

CVSS-score 9.8

Status PUBLISHED

Beschrijving

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade.

← Alle CVE's bekijken Bekijk op cve.org ↗