Information disclosure in Glpi-Project Glpi

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.

Vulnerability class: Information Disclosure

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References