Lucene search
K

The vulnerability in the GLPI system’s handling of requests and incidents, related to improper neutralization of special elements used in SQL commands, allows an attacker to carry out an attack based on time, using SQL injections in the REST API user_token.

🗓️ 29 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 2 Views

GLPI REST API user_token SQL injection due to improper neutralization enabling time-based attacks.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ALT Linux
Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1
4 Nov 202200:00
altlinux
ALT Linux
Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1
4 Nov 202200:00
altlinux
Circl
CVE-2022-39323
3 Nov 202217:20
circl
CNNVD
GLPI SQL注入漏洞
3 Nov 202200:00
cnnvd
CVE
CVE-2022-39323
3 Nov 202200:00
cve
Cvelist
CVE-2022-39323 SQL Injection on REST API in GLPI
3 Nov 202200:00
cvelist
EUVD
EUVD-2022-41805
3 Oct 202520:07
euvd
NVD
CVE-2022-39323
3 Nov 202215:15
nvd
OSV
CVE-2022-39323 SQL Injection on REST API in GLPI
3 Nov 202200:00
osv
OSV
UBUNTU-CVE-2022-39323
3 Nov 202215:15
osv
Rows per page
Vulners
Node
glpiglpiRange9.110.0.4

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Jul 2024 00:00Current
7.9High risk
Vulners AI Score7.9
CVSS 39.8
CVSS 210
EPSS0.34251
2