Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2020/07/17 8:30 p.m.29 views

CVE-2020-15108 SQL Injection in glpi

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1...

7.1CVSS7.3AI score0.01233EPSS
SaveExploits0References3
CVE
CVE
added 2020/07/17 8:30 p.m.71 views

CVE-2020-15108

CVE-2020-15108 affects GLPI prior to 9.5.1, where the Clone feature triggers a SQL injection. Root cause: unsafely handled inputs in Clone usage leading to SQL injection. Impact per provided metrics: CVSS v3.1 base score 7.1 (HIGH), Network attack, Privileges Required: LOW, Confidentiality High, ...

7.1CVSS7.3AI score0.01233EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder