CVE-2024-38370 - GLPI Server-Side Request Forgery

CVE ID : CVE-2024-38370
Published : Nov. 15, 2024, 10:15 p.m. | 24 minutes ago
Description : GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...