Lucene search
HistoryMar 15, 2024 - 7:15 a.m.
CVE-2024-27756
glpi 10.0.12
csv injection
asset creation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.0%
GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.
Related
redos
redos
ROS-20240828-02
2024-08-28 00:00:00
ubuntucve
ubuntucve
CVE-2024-27756
2024-03-15 00:00:00
cvelist
cvelist
CVE-2024-27756
2024-03-15 00:00:00
vulnrichment
vulnrichment
CVE-2024-27756
2024-03-15 00:00:00
cve
cve
CVE-2024-27756
2024-03-15 07:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-27756