Description
GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. This issue is fixed in versions 11.0.8 and 10.0.26.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
glpi-project glpi
>= 9.4.0, < 10.0.26affected>= 11.0.0, < 11.0.8affected
References
- https://github.com/glpi-project/glpi/security/advisories/GHSA-cpcj-x335-5cmh ↗
- https://github.com/glpi-project/glpi/commit/1296798fb03295d07c1d97fa8483d1dbab59fef5 ↗
- https://github.com/glpi-project/glpi/commit/80b86c0dcad2f6ece9b5da445d1c264a1dda3ce5 ↗
- https://github.com/glpi-project/glpi/releases/tag/10.0.26 ↗
- https://github.com/glpi-project/glpi/releases/tag/11.0.8 ↗