CVE-2026-29047
GLPI has an Authenticated SQL Injection via log exports
Résumé
GLPI has an Authenticated SQL Injection via log exports
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov