Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-15217

User data exposure in GLPI

Description

In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to the FAQ.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

glpi-project glpi

  • >= 9.5.0, < 9.5.2affected

References