Unrated
GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.
CVE-2024-27756
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web medium.com