CVE-2023-46727

Summary

CVE-2023-46727 is a vulnerability affecting GLPI, a free asset and IT management software. Versions prior to 10.0.11 contain an SQL injection vulnerability in the inventory endpoint, enabling attackers to execute malicious SQL queries. This issue can lead to unauthorized access or data theft. As a temporary solution, disabling the native inventory feature is advised. GLPI has released a patch in version 10.0.11 to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.