CVE-2019-10477

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

CVE-2019-10477

The CVE covers the FusionInventory plugin for GLPI, where versions before 1.4 (GLPI 9.3.x) and before 1.1 (GLPI 9.4.x) mishandle sendXML actions. The issue is tied to the plugin’s handling of XML-sending actions, with public references indicating available fixes in the same project’s GLPI branche...