CVE-2020-27663

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any…

published November 26, 2020

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Published
2020-11-26T16:49Z
EPSS history
Timeline
  • 26 NOV 16:49Z
    In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any…
    cvelistv5