CVE-2024-47758

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-47758
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-47758.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-47758
Aliases
  • GHSA-3r4x-6pmx-phwr
Related
Published
2024-12-11T16:15:11Z
Modified
2025-02-07T02:13:09.070972Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the API to take control of any user that have the same or a lower level of privileges. Version 10.0.17 contains a patch for this issue.

References

Affected packages

Git / github.com/glpi-project/glpi

Affected ranges

Type
GIT
Repo
https://github.com/glpi-project/glpi
Events