Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/05 12:00 a.m.•4 views

CVE-2023-29006: Deserialization of Untrusted Data

The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an authenticated user that has access to standard interface can craft an URL that can be used to execute a system command. Versions 2.7.7 and 2.10.1 conta...

8.8CVSS5.9AI score0.00857EPSS
SaveExploits0References2
Rows per page
Query Builder