CVE-2024-45608

Published Nov 15, 2024

Last updated 2 days ago

CVSS medium 6.5

Overview

Description: GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17.
Source: security-advisories@github.com
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

security-advisories@github.com: CWE-89

Hype score: Not currently trending

CVE-2024-45608 Advisories This repository contains public advisories (links), exploits, CVEs I have found. 2024 GLPI - Authenticated SQL injection CVE-2024-45608 2023 PHP - XML external entity loading securit... https://t.co/37yD8cudqe
@VulmonFeeds
15 Nov 2024
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References