CVE-2023-35924

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.8, GLPI inventory endpoint can be used to drive a SQL injection attack. By default, GLPI inventory endpoint requires no authentication. Version 10.0.8 has a patch for this issue. As a workaround, one may disable native inventory.

• CWE-89

• https://github.com/glpi-project/glpi/releases/tag/10.0.8Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-gxh4-j63w-8jmmVendor Advisory
• https://github.com/glpi-project/glpi/releases/tag/10.0.8Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-gxh4-j63w-8jmmVendor Advisory

Published

Jul 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35916Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2023-35917Cross-Site Request Forgery (CSRF) vulnerability in WooCommer…8.8
• CVE-2023-35918Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-3592In Mosquitto before 2.0.16, a memory leak occurs when client…7.5
• CVE-2023-35920A vulnerability has been identified in SIMATIC MV540 H (All …7.5
• CVE-2023-35921A vulnerability has been identified in SIMATIC MV540 H (All …7.5
• CVE-2023-35925FastAsyncWorldEdit (FAWE) is designed for efficient world ed…5.5
• CVE-2023-35926Backstage is an open platform for building developer portals…9.9
• CVE-2023-35927NextCloud Server and NextCloud Enterprise Server provide fil…8.1
• CVE-2023-35928Nextcloud Server is a space for data storage on Nextcloud, a…8.8
• CVE-2023-35929Tuleap is a free and open source suite to improve management…5.4
• CVE-2023-3593Mattermost fails to properly validate markdown, allowing an …6.5