Lucene search
PRIOn knowledge basePRION:CVE-2023-28855HistoryApr 05, 2023 - 6:15 p.m.
Design/Logic Flaw
2023-04-0518:15:00
PRIOn knowledge base
www.prio-n.com
glpi
fields plugin
access control
logic flaw
data write
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to versions 1.13.1 and 1.20.4, lack of access control check allows any authenticated user to write data to any fields container, including those to which they have no configured access. Versions 1.13.1 and 1.20.4 contain a patch for this issue.
Related
osv
osv
CVE-2023-28855
2023-04-05 18:15:08
cve
cve
CVE-2023-28855
2023-04-05 18:15:08
cvelist
cvelist
nvd
nvd
CVE-2023-28855
2023-04-05 18:15:08
redos
redos
ROS-20230619-01
2023-06-19 00:00:00