CVE-2026-11321

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-11321

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11321.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-11321

Aliases

GHSA-57qv-j6r6-pcc4

Published

2026-07-10T18:53:56.004Z

Modified

2026-07-16T03:30:53.143045785Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import

Details

The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV field values directly into SQL queries during CSV import, without parameterization or escaping, resulting in authenticated SQL injection. An authenticated user with access to the Data injection feature can embed SQL expressions such as SLEEP() in a mapped field (for example Serial Number) to manipulate the generated query and extract database information via time-based blind injection.

Database specific

{
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11321.json",
    "cna_assigner": "VulnCheck"
}

References

Affected packages

Git / github.com/pluginsglpi/datainjection

Affected ranges

Type

GIT

Repo

https://github.com/pluginsglpi/datainjection

Events

Introduced

8b3168b658073515c81f8a32fa5dbc646052fbb9

Fixed

76d5c0b3ea2e91ace22ad027c3d02e3c42e8d340

Database specific

{
    "extracted_events": [
        {
            "introduced": "2.15.6"
        },
        {
            "fixed": "2.15.7"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.15.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11321.json"