Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-53850

The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

Description

The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name) in GLPI.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pluginsGLPI addressing

  • >= 3.0.0 < 3.0.3affected

References