Lucene search

Ubuntu.comUB:CVE-2024-27756

HistoryMar 15, 2024 - 12:00 a.m.

CVE-2024-27756

2024-03-1500:00:00

ubuntu.com

glpi vulnerability

remote attack

code execution

privilege escalation

sensitive information

crafted script

unix

AI Score

Confidence

Low

EPSS

Percentile

9.0%

GLPI through 10.0.12 allows CSV injection by an attacker who is able to
create an asset with a crafted title.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchglpi< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	16.04	noarch	glpi	< any	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2024-27756

medium.com/%40cristiansindile/formula-injection-in-glpi-cve-2024-27756-3649c7cca092

nvd.nist.gov/vuln/detail/CVE-2024-27756

security-tracker.debian.org/tracker/CVE-2024-27756

www.cve.org/CVERecord?id=CVE-2024-27756

AI Score

Confidence

Low

EPSS

Percentile

9.0%

Related for UB:CVE-2024-27756