CVE-2024-45600

Fields GLPI plugin (Fields) for GLPI: prior to v1.21.13, an authenticated user can perform an SQL injection when the plugin is active; fixed in v1.21.13. Documents also note exploitation could allow arbitrary SQL execution in some sources; recommended remediation is to upgrade to 1.21.13 or disab...

CVE-2024-45600 Fields GLPI plugin has an Authenticated SQL Injection

Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13...