Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2022-29250

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to version 10.0.1 it is possible to add extra information by SQL injection on search pages. In order to exploit this vulnerability a user must be logged in.

  • Published: Jun 9, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-29250
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
glpi-project / glpi 10.0.0-beta 10.0.0-beta.x
glpi-project / glpi 10.0.0-rc1 10.0.0-rc1.x
glpi-project / glpi 10.0.0-rc2 10.0.0-rc2.x
glpi-project / glpi 10.0.0-rc3 10.0.0-rc3.x
glpi-project / glpi 10.0.0 10.0.0.x