GLPI Information Disclosure Vulnerability (CNVD-2022-58232)

GLPI is an open source IT and asset management software. The software provides a full-featured IT resource management interface that you can use to build a database to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridges and ink cartridges. An attacker could exploit this vulnerability to cause all instances of GLPI that use the machine’s inventory to potentially disclose sensitive information.