CVE-2024-53850
The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
概要
The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name) in GLPI.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com