CVE-2024-45600
Fields GLPI plugin has an Authenticated SQL Injection
Résumé
Fields GLPI plugin has an Authenticated SQL Injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com