CVE-2021-39213

Published September 15th, 2021

View on NVD ↗

CVSS v3

6.8

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround.

glpi-project/glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

GitHub

6.04K