CVE-2023-51446

CVSS V2 None CVSS V3 None

Description

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.

Overview

CVE ID
CVE-2023-51446

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-02-01T15:25:01.465Z

Last Modified Date
2024-02-01T17:12:20.080Z

Weakness Enumerations

CWE	URL
CWE-90	http://cwe.mitre.org/data/definitions/90.html
CWE-74	http://cwe.mitre.org/data/definitions/74.html

References

Reference URL	Reference Tags
https://github.com/glpi-project/glpi/security/advisories/GHSA-p995-jmfv-c7r8	x_refsource_CONFIRM
https://github.com/glpi-project/glpi/commit/58c67d78f2e3ad08264213e9aaf56eab3c9ded35	x_refsource_MISC
https://github.com/glpi-project/glpi/releases/tag/10.0.12	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-51446
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51446

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 18:43:11				Added to TrackCVE