GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can execute a SSRF based attack using Arbitrary Object Instantiation. This issue has been patched in version 10.0.13.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-03-18T16:14:18.894Z
Updated: 2024-06-04T17:47:14.574Z
Reserved: 2024-02-19T14:43:05.993Z
Link: CVE-2024-27098
JSON object: View
NVD Information
Status : Awaiting Analysis
Published: 2024-03-18T17:15:06.593
Modified: 2024-03-18T19:40:00.173
Link: CVE-2024-27098
JSON object: View
Redhat Information
No data.
CWE