Lucene search

GoogleOSV:CVE-2020-15108

HistoryJul 17, 2020 - 9:15 p.m.

CVE-2020-15108

2020-07-1721:15:12

Google

osv.dev

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.4%

JSON

In glpi before 9.5.1, there is a SQL injection for all usages of “Clone” feature. This has been fixed in 9.5.1.

CPENameOperatorVersion
glpieq9.4.0
glpieq9.1-RC2
glpieq0.90-RC1
glpieq0.90.1
glpieq0.90-beta1
glpieq9.4.0-beta
glpieq9.4.1.1
glpieq9.4.1
glpieq9.1
glpieq9.5.0-rc1

Name	Operator	Version
glpi	eq	9.4.0
glpi	eq	9.1-RC2
glpi	eq	0.90-RC1
glpi	eq	0.90.1
glpi	eq	0.90-beta1
glpi	eq	9.4.0-beta
glpi	eq	9.4.1.1
glpi	eq	9.4.1
glpi	eq	9.1
glpi	eq	9.5.0-rc1

Rows per page:

1-10 of 241

References

github.com/glpi-project/glpi/commit/a4baa64114eb92fd2adf6056a36e0582324414ba

github.com/glpi-project/glpi/pull/6684

github.com/glpi-project/glpi/security/advisories/GHSA-qv6w-68gq-wx2v