Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-45608

GLPI has an Authenticated SQL Injection

Description

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

glpi-project glpi

  • >= 9.5.0, < 10.0.17affected

References