PT-2019-11647
CVE-2019-10232
·
تاريخ النشر
2019-03-27
·
تاريخ التحديث
2019-03-28
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Teclib GLPI versions prior to 9.3.4
Description:
The issue is related to SQL injection via the
cycle parameter in the "/scripts/unlock tasks.php" API endpoint.Recommendations:
For versions prior to 9.3.4, update to version 9.3.4 or later to resolve the issue.
As a temporary workaround, consider restricting access to the "/scripts/unlock tasks.php" API endpoint until a patch is available.
Avoid using the
cycle parameter in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾