Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-27756
8.8
HIGHCVSS v3
Published
March 15, 2024
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.<= 10.0.12NVD
glpi
NPM
Docker Hub