Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2024/05/07 2:5 p.m.46 views

CVE-2024-29889 GLPI contains an SQL injection through the saved searches

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. This vulnerability is fixed in 10.0.15...

7.1CVSS7.3AI score0.6296EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/07 2:5 p.m.28 views

CVE-2024-29889 GLPI contains an SQL injection through the saved searches

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. This vulnerability is fixed in 10.0.15...

7.1CVSS8AI score
SaveExploits0References4
Rows per page
Query Builder