Approved changes feed: RSS · Atom

cpe:2.3:a:glpi-project:glpi:9.4.5:*:*:*:*:*:*:*

part: a version: 9.4.5 update: *

VendorGlpi Project (bef553f0-49a5-5069-ba42-78448263cef9)
ProductGlpi (5fde319e-7958-54ba-bdc3-1448651b65ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/mrlioncub/glpi purl2cpe 2026-06-01 10:15:46.950913
pkg:github/glpi-project/glpi purl2cpe 2026-06-01 10:15:46.950915

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11032 vulnerable 2026-06-03 14:41:00.988791 SQL injection on addme_observer and addme_assign in GLPI
HIGH (7.6)
In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6.
Published: 2020-05-05T21:05:12.000Z
Updated: 2024-08-04T11:21:14.564Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.