CVE-2023-34106
GLPI vulnerable to unauthorized access to User data
Résumé
GLPI vulnerable to unauthorized access to User data
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should upgrade to version 10.0.8 to receive a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com