CVE-2020-15176

Technical details about CVE-2020-15176 are not provided in the connected documents. The initial description mentions a GLPI SQL injection patched in 9.5.2, but no concrete technical specifics (impact, vectors, or affected versions) are present in the connected sources. Monitor for updates.

CVE-2020-15176 SQL injection in GLPI

In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulnerability an attacker is able to exfiltrate sensitive information like passwords, reset tokens,...