PT-2023-22081 · Glpi · Order Glpi Plugin

C3L3Si4N · Publicado 2023-04-05 · Atualizado 2023-04-12 · CVE-2023-29006

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Order GLPI plugin versions 1.8.0 through 2.7.6 Order GLPI plugin versions 2.8.0 through 2.10.0

Description The issue allows an authenticated user with access to the standard interface to craft a URL that can execute a system command.

Recommendations For Order GLPI plugin versions 1.8.0 through 2.7.6, update to version 2.7.7. For Order GLPI plugin versions 2.8.0 through 2.10.0, update to version 2.10.1. As a temporary workaround, consider deleting the ajax/dropdownContact.php file from the plugin.

Exploit

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2023-29006

GHSA-XFX2-QX2R-3WWM

Produtos afetados

Order Glpi Plugin

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29006.json · Exploit
• https://github.com/pluginsGLPI/order/commit/c78e64b95e54d5e47d9835984c93049f245b579e · Correção
• https://github.com/pluginsGLPI/order/security/advisories/GHSA-xfx2-qx2r-3wwm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-29006 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-29006 · Aviso do Fabricante