Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to versions 1.13.1 and 1.20.4, lack of access control check allows any authenticated user to write data to any fields container, including those to which they have no configured access. Versions 1.13.1 and 1.20.4 contain a patch for this issue.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-04-05T17:48:22.384Z
Updated: 2024-08-02T13:51:38.639Z
Reserved: 2023-03-24T16:25:34.468Z
Link: CVE-2023-28855
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-05T18:15:08.583
Modified: 2024-11-21T07:56:09.957
Link: CVE-2023-28855
Redhat
No data.