FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

glpi -- SQL injection for all usages of "Clone" feature

Affected packages
9.5.0 < glpi
glpi < 9.5.1

Details

VuXML ID 7f163c81-3b12-11eb-af2a-080027dbe4b7
Discovery 2020-06-25
Entry 2020-06-25

MITRE Corporation reports:

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

[source]

References

CVE Name CVE-2020-15108
URL https://github.com/glpi-project/glpi/commit/a4baa64114eb92fd2adf6056a36e0582324414ba
URL https://github.com/glpi-project/glpi/pull/6684
URL https://github.com/glpi-project/glpi/security/advisories/GHSA-qv6w-68gq-wx2v

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.