CVE-2026-29047
GLPI has an Authenticated SQL Injection via log exports
Summary
GLPI has an Authenticated SQL Injection via log exports
Original description
The description as published by the source.
GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov