Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Pftpz

#44193de 56,337
6.5CVSS total
Vulnerabilidades · 1
PT-2023-3282
6.5
2023-04-05
Glpi · Fields · CVE-2023-28855
**Name of the Vulnerable Software and Affected Versions** Fields versions prior to 1.13.1 Fields versions prior to 1.20.4 **Description** The issue is related to a lack of access control check in the Fields plugin for GLPI, allowing any authenticated user to write data to any fields container, including those to which they have no configured access. This could potentially be exploited by an attacker to record data in any container. **Recommendations** For versions prior to 1.13.1, update to version 1.13.1 or later to resolve the issue. For versions prior to 1.20.4, update to version 1.20.4 or later to resolve the issue.