CVE-2024-38370
GLPI allows API document download without rights
概要
GLPI allows API document download without rights
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov