Beveiligingsadvies

CVE-2023-29006

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-05 17:53:03

Laatst bijgewerkt 2025-02-10 15:23:39

Toegewezen door GitHub_M

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an authenticated user that has access to standard interface can craft an URL that can be used to execute a system command. Versions 2.7.7 and 2.10.1 contain a patch for this issue. As a workaround, delete the `ajax/dropdownContact.php` file from the plugin.

← Alle CVE's bekijken Bekijk op cve.org ↗