PT-2020-16755 · Teclib +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.3 Description: The issue affects the ajax/getDropdownValue.php file, presenting an Insecure Direct Object Reference IDOR vulnerability. This allows an attacker to read data from any itemType, such as Ticket or Users...