Beveiligingsadvies

CVE-2024-37149

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-10 19:20:36

Laatst bijgewerkt 2024-11-19 14:15:12

Toegewezen door GitHub_M

CVSS-score 7.2

Status PUBLISHED

Beschrijving

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated technician user can upload a malicious PHP script and hijack the plugin loader to execute this malicious script. Upgrade to 10.0.16.

← Alle CVE's bekijken Bekijk op cve.org ↗