PT-2023-6847 · Glpi+2 · Glpi+2

Mmnhack · Published 2023-09-26 · Updated 2024-05-22 · CVE-2023-42461

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.10

Description The issue is related to the use of the ITIL actors input field from the ticket form, which can be exploited to perform a SQL injection. This allows a remote attacker to potentially capture an administrator account by sending a specially crafted SQL query. GLPI is a free asset and IT management software package that provides ITIL service desk features, licenses tracking, and software auditing.

Recommendations For versions prior to 10.0.10, upgrade to version 10.0.10 to resolve the issue. As a temporary workaround, consider restricting access to the ITIL actors input field from the ticket form to minimize the risk of exploitation. Avoid using the ITIL actors input field in the affected ticket form until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2023-6186

ALT-PU-2023-7633

ALT-PU-2024-8030

BDU:2023-07850

CVE-2023-42461

GHSA-X3JP-69F2-P84W

Affected Products

Alt Linux

Glpi

Red Os

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glpi_htmlawed_php_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/42xxx/CVE-2023-42461.json · Exploit
• 🔥 https://github.com/cactuschibre/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/cosad3s/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/Wangyanan131/CVE-2022-31061 · Exploit
• 🔥 https://github.com/Vu0r1-sec/CVE-2022-31061 · Exploit
• https://github.com/glpi-project/glpi/security/advisories/GHSA-x3jp-69f2-p84w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-42461 · Security Note
• https://bdu.fstec.ru/vul/2023-07850 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42461 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-42461 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-42461 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42461 · Vendor Advisory
• https://twitter.com/CVEnew/status/1706851418408186352 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-glpi-cve-2023-41320-cve-2023-41321-cve-2023-41322-cve-2023-41323-cve-2023 · Note