CVE-2023-36808

Summary

CVE-2023-36808 is a vulnerability affecting GLPI, a free IT management software. In versions prior to 10.0.8, SQL injection attacks can be executed through the Computer Virtual Machine form and GLPI inventory request. This issue allows unauthorized users to access sensitive data or even take control of the system. To mitigate the risk, users can apply the patch available in version 10.0.8 or disable the native inventory feature as a temporary workaround.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.