2 matches found
CVE-2020-15108 SQL Injection in glpi
In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1...
CVE-2020-15108
CVE-2020-15108 affects GLPI prior to 9.5.1, where the Clone feature triggers a SQL injection. Root cause: unsafely handled inputs in Clone usage leading to SQL injection. Impact per provided metrics: CVSS v3.1 base score 7.1 (HIGH), Network attack, Privileges Required: LOW, Confidentiality High, ...