9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulnerability GLPI versions field is injected directly into a SQL query without sanitisation: sql SELECT id FROM glpiagents WHERE deviceid = '' No authentication is required. The vulnerability allows...
Basic Information
ID
9BC08ADB-8F4F-5010-BDA8-9F36150A79A7
Published
Jun 10, 2026 at 12:33
Modified
Jun 10, 2026 at 12:46