CVE-2023-34107
GLPI vulnerable to unauthorized access to KnowbaseItem data
概要
GLPI vulnerable to unauthorized access to KnowbaseItem data
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user, allows access to the view all KnowbaseItems. Version 10.0.8 has a patch for this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com