CVE-2023-43813

Publication date

2023-12-13 18:17:21

Family

GitHub_M

State

PUBLISHED

Description

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue.