5 matches found
CVE-2023-41326
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A logged user from any profile can hijack the Kanban feature to alter any user field, and end-up with...
CVE-2023-41326
creationtimestamp| type| source ---|---|--- 2023-09-27 18:46:05+00:00| seen| https://t.me/cibsecurity/71101...
CVE-2023-41326
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A logged user from any profile can hijack the Kanban feature to alter any user field, and end-up with...
CVE-2023-41326
CVE-2023-41326 affects GLPI (Gestionnaire Libre de Parc Informatique). A logged-in user can hijack the Kanban feature to alter any user field, potentially leading to account compromise. The description recommends upgrading to GLPI version 10.0.10 to fix this issue; vendor advisories and related s...
CVE-2023-41326 Account takeover via Kanban feature in GLPI
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A logged user from any profile can hijack the Kanban feature to alter any user field, and end-up with...