Security Advisory

CVE-2023-28855

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-05 17:48:22

Last updated 2025-02-10 16:27:40

Assigner GitHub_M

State PUBLISHED

Description

Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to versions 1.13.1 and 1.20.4, lack of access control check allows any authenticated user to write data to any fields container, including those to which they have no configured access. Versions 1.13.1 and 1.20.4 contain a patch for this issue.

← Browse all CVEs View on cve.org ↗