Security Flaw in Addressing GLPI Plugin Allows Data Disclosure

CVE-2024-53850

What is CVE-2024-53850?

The Addressing GLPI plugin, which provides visualization and reporting features for IP addresses within a network, contains a vulnerability in versions 3.0.0 through 3.0.3. This flaw arises from inadequate security checks that permit an unauthenticated attacker to ascertain the existence of data by its name within the GLPI environment. Such unauthorized access can lead to potential exposure of sensitive information, significantly increasing the risk of future attacks or data breaches. It is crucial for users of the affected plugin versions to implement recommended security measures and update to a patched version to safeguard their systems.

References