Lucene search

K
cvelistMitreCVELIST:CVE-2020-27663
HistoryNov 26, 2020 - 4:49 p.m.

CVE-2020-27663

2020-11-2616:49:03
mitre
www.cve.org
2

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%