Skip to content
OpenAdvisories

Vendor

pluginsGLPI

15 known vulnerabilities.

Products

fields 3 addressing 2 databaseinventory 2 sccm 1 order 1 mreporting 1 formcreator 1 datainjection 1 tag 1 escalade 1 barcode 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2024-53850

    The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

    The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name)…

    pluginsGLPI addressing
  • High 7.7
    CVE-2024-45600

    Fields GLPI plugin has an Authenticated SQL Injection

    Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13.

    pluginsGLPI fields
  • High 8.8
    CVE-2023-29006

    Order GLPI plugin vulnerable to remote code execution from authenticated user

    The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an authenticated user that has access to standard interface can craft an URL that can be used to execute a system co…

    pluginsGLPI order