CVE-2020-15108

HIGH

glpi <9.5.1 - SQL Injection

Title source: llm

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

Core 3

Core References

Third Party Advisory x_refsource_confirm

Third Party Advisory x_refsource_misc

Patch, Third Party Advisory x_refsource_misc

CVSS v3 7.1

EPSS 0.0034

EPSS Percentile 56.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE

CWE-89

Status published

Products (1)

glpi-project/glpi < 9.5.1

Published Jul 17, 2020

Tracked Since Feb 18, 2026