CVE-2024-53850
CVSS 3.1 Score 8.2 of 10 (high)
Details
Published Dec 26, 2024
CWE ID 470
Summary
CVE-2024-53850 is a vulnerability affecting the Addressing GLPI plugin, which is used to generate IP reports for network visualization in GLPI. In versions 3.0.0 to 3.0.2, this plugin contains a weak security check that allows unauthenticated attackers to ascertain whether data exists by name within the GLPI system. This issue can potentially be exploited to gather sensitive information or facilitate further attacks. Upgrading to version 3.0.3 or later is recommended to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.