Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to versions 1.13.1 and 1.20.4, lack of access control check allows any authenticated user to write data to any fields container, including those to which they have no configured access. Versions 1.13.1 and 1.20.4 contain a patch for this issue.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-04-05T17:48:22.384Z
Updated: 2023-04-05T17:48:22.384Z
Reserved: 2023-03-24T16:25:34.468Z
Link: CVE-2023-28855
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-04-05T18:15:08.583
Modified: 2023-04-12T16:38:39.363
Link: CVE-2023-28855
JSON object: View
Redhat Information
No data.
CWE