CVE-2023-43813

HIGH 8.8CVE-2023-43813 · Published 13/12/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
glpi glpi-project	`≥ 10.0.0, < 10.0.11`	`10.0.11`

Description

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue.

References

glpi-project/glpi commit 4bd7f02 · Patch
glpi-project/glpi release 10.0.11 · Release Notes
glpi-project/glpi security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free