CVE-2023-46727

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI inventory endpoint can be used to drive a SQL injection attack. Version 10.0.11 contains a patch for the issue. As a workaround, disable native inventory.

• CWE-89

• https://github.com/glpi-project/glpi/commit/ee2d674481ebef177037e8e14d35c9455b5cfd46Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.11Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-v799-2mp3-wgfrVendor Advisory
• https://github.com/glpi-project/glpi/commit/ee2d674481ebef177037e8e14d35c9455b5cfd46Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.11Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-v799-2mp3-wgfrVendor Advisory

Published

Dec 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46721Rejected reason: Not used
• CVE-2023-46722The Pimcore Admin Classic Bundle provides a backend UI for P…6.1
• CVE-2023-46723lte-pic32-writer is a writer for PIC32 devices. In versions …7.5
• CVE-2023-46724Squid is a caching proxy for the Web. Due to an Improper Val…7.5
• CVE-2023-46725FoodCoopShop is open source software for food coops and loca…7.5
• CVE-2023-46726GLPI is a free asset and IT management software package. Sta…9.8
• CVE-2023-46728Squid is a caching proxy for the Web supporting HTTP, HTTPS,…7.5
• CVE-2023-46729sentry-javascript provides Sentry SDKs for JavaScript. An un…6.1
• CVE-2023-4673Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-46730Group-Office is an enterprise CRM and groupware tool. In aff…8.8
• CVE-2023-46731XWiki Platform is a generic wiki platform offering runtime s…9.8
• CVE-2023-46732XWiki Platform is a generic wiki platform offering runtime s…6.1