Vulnerabilities > CVE-2023-28636 - Unspecified vulnerability in Glpi-Project Glpi

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

glpi-project

NVD

Published: 2023-04-05

Updated: 2024-11-21

Summary

GLPI is a free asset and IT management software package. Starting in version 0.60 and prior to versions 9.5.13 and 10.0.7, a vulnerability allows an administrator to create a malicious external link. This issue is fixed in versions 9.5.13 and 10.0.7.

Vulnerable Configurations

Part	Description	Count
Application	Glpi-Project Glpi Project Glpi 10.0.0 Glpi Project Glpi 10.0.1 Glpi Project Glpi 10.0.2 Glpi Project Glpi 10.0.3 Glpi Project Glpi 10.0.4 Glpi Project Glpi 10.0.5 Glpi Project Glpi 10.0.6 Glpi Project Glpi 0.60 Glpi Project Glpi 0.65 Glpi Project Glpi 0.68 Glpi Project Glpi 0.68.1 Glpi Project Glpi 0.68.2 Glpi Project Glpi 0.68.3 Glpi Project Glpi 0.68.3-2 Glpi Project Glpi 0.70 Glpi Project Glpi 0.70.1 Glpi Project Glpi 0.70.2 Glpi Project Glpi 0.71 Glpi Project Glpi 0.71.1 Glpi Project Glpi 0.71.2 Glpi Project Glpi 0.71.3 Glpi Project Glpi 0.71.4 Glpi Project Glpi 0.71.5 Glpi Project Glpi 0.71.6 Glpi Project Glpi 0.72 Glpi Project Glpi 0.72.1 Glpi Project Glpi 0.72.2 Glpi Project Glpi 0.72.3 Glpi Project Glpi 0.72.4 Glpi Project Glpi 0.72.21 Glpi Project Glpi 0.78 Glpi Project Glpi 0.78.1 Glpi Project Glpi 0.78.2 Glpi Project Glpi 0.78.3 Glpi Project Glpi 0.78.4 Glpi Project Glpi 0.78.5 Glpi Project Glpi 0.80 Glpi Project Glpi 0.80.1 Glpi Project Glpi 0.80.2 Glpi Project Glpi 0.80.3 Glpi Project Glpi 0.80.4 Glpi Project Glpi 0.80.5 Glpi Project Glpi 0.80.6 Glpi Project Glpi 0.80.7 Glpi Project Glpi 0.80.61 Glpi Project Glpi 0.83 Glpi Project Glpi 0.83.1 Glpi Project Glpi 0.83.2 Glpi Project Glpi 0.83.3 Glpi Project Glpi 0.83.4 Glpi Project Glpi 0.83.5 Glpi Project Glpi 0.83.6 Glpi Project Glpi 0.83.7 Glpi Project Glpi 0.83.8 Glpi Project Glpi 0.83.9 Glpi Project Glpi 0.83.31 Glpi Project Glpi 0.83.91 Glpi Project Glpi 0.84 Glpi Project Glpi 0.84.1 Glpi Project Glpi 0.84.2 Glpi Project Glpi 0.84.3 Glpi Project Glpi 0.84.4 Glpi Project Glpi 0.84.5 Glpi Project Glpi 0.84.6 Glpi Project Glpi 0.84.7 Glpi Project Glpi 0.84.8 Glpi Project Glpi 0.85 Glpi Project Glpi 0.85.1 Glpi Project Glpi 0.85.2 Glpi Project Glpi 0.85.3 Glpi Project Glpi 0.85.4 Glpi Project Glpi 0.85.5 Glpi Project Glpi 0.90 Glpi Project Glpi 0.90.1 Glpi Project Glpi 0.90.2 Glpi Project Glpi 0.90.3 Glpi Project Glpi 0.90.4 Glpi Project Glpi 0.90.5 Glpi Project Glpi 9.1 Glpi Project Glpi 9.1.0 Glpi Project Glpi 9.1.1 Glpi Project Glpi 9.1.2 Glpi Project Glpi 9.1.3 Glpi Project Glpi 9.1.4 Glpi Project Glpi 9.1.5 Glpi Project Glpi 9.1.6 Glpi Project Glpi 9.1.7 Glpi Project Glpi 9.1.7.1 Glpi Project Glpi 9.2 Glpi Project Glpi 9.2.0 Glpi Project Glpi 9.2.1 Glpi Project Glpi 9.2.2 Glpi Project Glpi 9.2.3 Glpi Project Glpi 9.2.4 Glpi Project Glpi 9.3.0 Glpi Project Glpi 9.3.1 Glpi Project Glpi 9.3.2 Glpi Project Glpi 9.3.3 Glpi Project Glpi 9.3.4 Glpi Project Glpi 9.4.0 Glpi Project Glpi 9.4.1 Glpi Project Glpi 9.4.1.1 Glpi Project Glpi 9.4.2 Glpi Project Glpi 9.4.3 Glpi Project Glpi 9.4.5 Glpi Project Glpi 9.4.6 Glpi Project Glpi 9.5.0 Glpi Project Glpi 9.5.1 Glpi Project Glpi 9.5.2 Glpi Project Glpi 9.5.3 Glpi Project Glpi 9.5.4 Glpi Project Glpi 9.5.5 Glpi Project Glpi 9.5.6 Glpi Project Glpi 9.5.7 Glpi Project Glpi 9.5.8 Glpi Project Glpi 9.5.9 Glpi Project Glpi 9.5.10 Glpi Project Glpi 9.5.11 Glpi Project Glpi 9.5.12	160

Summary

Vulnerable Configurations

References