FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-19 18:22:07 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
695b2310-3b3a-11eb-af2a-080027dbe4b7glpi -- Insecure Direct Object Reference on ajax/getDropdownValue.php

MITRE Corporation reports:

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).


Discovery 2020-10-22
Entry 2020-10-22
glpi
< 9.5.3

https://github.com/glpi-project/glpi/security/advisories/GHSA-pqfv-4pvr-55r4
CVE-2020-27663