| Package | Affected versions | Patched versions |
|---|---|---|
| glpi | = 0.42= 0.5= 0.51= 0.51a= 0.6= 0.65= 0.68= 0.68.1= 0.68.2= 0.68.3= 0.70= 0.70.1= 0.70.2= 0.71= 0.71.1= 0.71.2= 0.71.3= 0.71.4= 0.71.5= 0.71.6= 0.72= 0.72.1= 0.72.2= 0.72.3= 0.72.4= 0.78= 0.78.1= 0.78.2= 0.78.3= 0.78.4= 0.78.5= 0.80≤ 0.80.1 |
The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free