CVE-2023-43813

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue.

• CWE-89

• https://github.com/glpi-project/glpi/commit/4bd7f02d940953b9cbc9d285f7544bb0e490e75ePatch
• https://github.com/glpi-project/glpi/releases/tag/10.0.11Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-94c3-fw5r-3362Vendor Advisory
• https://github.com/glpi-project/glpi/commit/4bd7f02d940953b9cbc9d285f7544bb0e490e75ePatch
• https://github.com/glpi-project/glpi/releases/tag/10.0.11Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-94c3-fw5r-3362Vendor Advisory

Published

Dec 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43803Arduino Create Agent is a package to help manage Arduino dev…7.1
• CVE-2023-43804urllib3 is a user-friendly HTTP client library for Python. u…8.1
• CVE-2023-43805Nexkey is a fork of Misskey, an open source, decentralized s…7.5
• CVE-2023-43809Soft Serve is a self-hostable Git server for the command lin…7.5
• CVE-2023-4381Unverified Password Change in GitHub repository instantsoft/…4.3
• CVE-2023-43810OpenTelemetry, also known as OTel for short, is a vendor-neu…7.5
• CVE-2023-43814Discourse is an open source platform for community discussio…3.7
• CVE-2023-43815A buffer overflow vulnerability exists in Delta Electronics …7.8
• CVE-2023-43816A buffer overflow vulnerability exists in Delta Electronics …7.8
• CVE-2023-43817A buffer overflow exists in Delta Electronics Delta Industri…7.8
• CVE-2023-43818A buffer overflow exists in Delta Electronics Delta Industri…7.8
• CVE-2023-43819A stack based buffer overflow exists in Delta Electronics De…7.8