Skip to content
OpenAdvisories

Product · pluginsGLPI

fields

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-28855

    Fields GLPI plugin vulnerable to unauthorized write access to additional fields

    Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to versions 1.13.1 and 1.20.4, lack of access control check allows any authenticated user to write data to any fields container, including those to which they have no co…

    pluginsGLPI fields