Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-51446

GLPI LDAP Injection during authentication

Description

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

glpi-project glpi

  • >= 0.70, < 10.0.12affected

References