← All advisories

Unrated severityNVD Advisory· Published Jul 17, 2020· Updated Aug 4, 2024

SQL Injection in glpi

CVE-2020-15108

Description

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

Affected products

2

Glpi Project/Glpillm-fuzzy2 versions
<9.5.1+ 1 more
- (no CPE)range: <9.5.1
- (no CPE)range: < 9.5.1

Patches

Vulnerability mechanics

References

3

github.com/glpi-project/glpi/commit/a4baa64114eb92fd2adf6056a36e0582324414bamitrex_refsource_MISC
github.com/glpi-project/glpi/pull/6684mitrex_refsource_MISC
github.com/glpi-project/glpi/security/advisories/GHSA-qv6w-68gq-wx2vmitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.