Vulnerabilities > Glpi Project > Glpi Inventory > 1.0.0

DATE CVE VULNERABILITY TITLE RISK
2022-06-27 CVE-2022-31082 SQL Injection vulnerability in Glpi-Project Glpi Inventory 1.0.0/1.0.1
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
network
low complexity
glpi-project CWE-89
7.5
2022-06-20 CVE-2022-31062 Path Traversal vulnerability in Glpi-Project Glpi Inventory 1.0.0/1.0.1
### Impact A plugin public script can be used to read content of system files.
network
low complexity
glpi-project CWE-22
5.0