High severity7.7OSV Advisory· Published Dec 26, 2024· Updated Apr 15, 2026
CVE-2024-45600
CVE-2024-45600
Description
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13.
Affected products
1- Range: 0.85-beta-6, 0.90-1.0, 0.90-1.1, …
Patches
29e8e99ae700beb927b0f084eVulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
2News mentions
0No linked articles in our index yet.