CVE-2016-7507

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
6
MEDIUM
Affected
1
PROJECT

Description

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGitHub
6.04K