Forum GLPI-Project

francois-teclib

Expert GLPI

From: TECLIB

Registered: 2006-11-05

Posts: 74

Website

GLPI 9.5.9

This is a security release, upgrading is recommended

Here is the eighth bugfixes release for GLPI 9.5.

Below, you'll find a short list of key points of this release:

• [SECURITY] XSS through registration API (CVE-2022-35945)

• [SECURITY] Leak of sensitive information through login page error (CVE-2022-31143)

• [SECURITY] [critical] Command injection using a third-party library script (CVE-2022-35914)

• [SECURITY] SQL injection through plugin controller (CVE-2022-35946)

• [SECURITY] [critical] Authentication via SQL injection (CVE-2022-35947)

• [SECURITY] Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning (CVE-2022-36112)

---

Besoin d'un support professionnel pour GLPI ? Pensez à GLPI Network ! https://glpi-project.org/fr/tarifs/

Connaissez-vous l'offre Cloud maintenue et supportée par l'équipe qui édite GLPI ?
Vous pouvez tester gratuitement pendant 45 jours ! https://glpi-network.cloud (ou plus si besoin)