high7.5
CVE-2019-10477
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
Impact
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fusioninventory | Fusioninventory | before 1.4 before 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/fusioninventory/fusioninventory-for-glpi/commit/0f777f85773b18f5252e79afa1929fcdc4858c3a
- https://github.com/fusioninventory/fusioninventory-for-glpi/compare/260a864...e1f776d
- https://github.com/fusioninventory/fusioninventory-for-glpi/compare/cec774a...baa4158
- https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.3%2B1.4
- https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.4%2B1.1
- https://github.com/fusioninventory/fusioninventory-for-glpi/commit/0f777f85773b18f5252e79afa1929fcdc4858c3a
- https://github.com/fusioninventory/fusioninventory-for-glpi/compare/260a864...e1f776d
- https://github.com/fusioninventory/fusioninventory-for-glpi/compare/cec774a...baa4158
- https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.3%2B1.4
- https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.4%2B1.1