CVE-2023-36808

Published: 2023-07-05T21:15Z

Last Modified: 2024-11-21T08:10Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. As a workaround, one may disable native inventory. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt