PT-2023-22081 · Glpi · Order Glpi Plugin

C3L3Si4N · Published 2023-04-05 · Updated 2023-04-12 · CVE-2023-29006

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Order GLPI plugin versions 1.8.0 through 2.7.6 Order GLPI plugin versions 2.8.0 through 2.10.0

Description The issue allows an authenticated user with access to the standard interface to craft a URL that can execute a system command.

Recommendations For Order GLPI plugin versions 1.8.0 through 2.7.6, update to version 2.7.7. For Order GLPI plugin versions 2.8.0 through 2.10.0, update to version 2.10.1. As a temporary workaround, consider deleting the ajax/dropdownContact.php file from the plugin.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2023-29006

GHSA-XFX2-QX2R-3WWM

Affected Products

Order Glpi Plugin

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29006.json · Exploit
• https://github.com/pluginsGLPI/order/commit/c78e64b95e54d5e47d9835984c93049f245b579e · Patch
• https://github.com/pluginsGLPI/order/security/advisories/GHSA-xfx2-qx2r-3wwm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29006 · Security Note
• https://osv.dev/vulnerability/CVE-2023-29006 · Vendor Advisory