CVE-2023-34107
GLPI vulnerable to unauthorized access to KnowbaseItem data
Résumé
GLPI vulnerable to unauthorized access to KnowbaseItem data
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user, allows access to the view all KnowbaseItems. Version 10.0.8 has a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com