Non évaluée
GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.
CVE-2024-27756
Première détection SecPulse
Références
- advisory github.com
- advisory nvd.nist.gov
- web medium.com