VYPR
← All advisories
Unrated severityNVD Advisory· Published May 5, 2020· Updated Aug 4, 2024

SQL injection on addme_observer and addme_assign in GLPI

CVE-2020-11032

Description

In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Glpi Project/Glpillm-fuzzy2 versions
    <9.4.6+ 1 more
    • (no CPE)range: <9.4.6
    • (no CPE)range: < 9.4.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.