Linux Distros Unpatched Vulnerability : CVE-2024-27756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title. CVE-2024-27756 Note that Nessus relies on the...

CVE-2024-27756

GLPI versions through 10.0.12 are vulnerable to CSV injection because the software fails to properly sanitize input when an attacker creates an asset with a crafted title . This flaw allows a remote attacker to impact the confidentiality, integrity, and availability of protected information, pote...