CVE-2022-29250

6.5 mediumEPSS 0.8%

Medium (6.5) in glpi-project glpi. EPSS 0.8% chance of exploitation in the next 30 days.

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to version 10.0.1 it is possible to add extra information by SQL injection on search pages. In order to exploit this vulnerability a user must be logged in.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

glpi-project:glpi

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-5w33-4wrx-8hvw
https://github.com/glpi-project/glpi/security/advisories/GHSA-5w33-4wrx-8hvw

Check your stack JSON