GLPI SQL Injection Vulnerability in Inventory Endpoint

A SQL injection vulnerability has been identified in GLPI versions 11.0.0 prior to 11.0.3. This vulnerability allows an unauthenticated user to execute malicious SQL queries through the inventory endpoint, potentially leading to unauthorized data access or manipulation.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Remediation

Users are advised to upgrade GLPI to version 11.0.3, where this vulnerability has been patched.