CVE-2022-31056
SQL injection with _actor parameter in GLPI
概要
SQL injection with _actor parameter in GLPI
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and all affected users are advised to upgrade.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com