Security Advisory
CVE-2024-27098
6.4
MEDIUM
Vulnerability Description
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can execute a SSRF based attack using Arbitrary Object Instantiation. This issue has been patched in version 10.0.13.
Published Date
March 18, 2024
Official Source
NIST NVD Advisory