CVE-2019-10477
- Source
- https://cve.org/CVERecord?id=CVE-2019-10477
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-10477.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-10477
- Published
- 2019-03-29T14:29:00.530Z
- Modified
- 2025-12-04T20:59:46.752471Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
- References
-
- https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.3%2B1.4
- https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.4%2B1.1
- https://github.com/fusioninventory/fusioninventory-for-glpi/commit/0f777f85773b18f5252e79afa1929fcdc4858c3a
- https://github.com/fusioninventory/fusioninventory-for-glpi/compare/260a864...e1f776d
- https://github.com/fusioninventory/fusioninventory-for-glpi/compare/cec774a...baa4158
Affected packages
Git
github.com/fusioninventory/fusioninventory-agent
Affected ranges
- Type
- GIT
- Repo
- https://github.com/fusioninventory/fusioninventory-agent
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
github.com/fusioninventory/fusioninventory-for-glpi
Affected ranges
- Type
- GIT
- Repo
- https://github.com/fusioninventory/fusioninventory-for-glpi
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixed
Affected versions
0.*
0.80+1.1
0.83+2.0
0.83+2.0-BETA1
2.*
2.2.0
2.2.0-BETA4
2.3.0-BETA2
2.3.0-BETA4
2.4.0-BETA1
before-merge/fusinvdeploy-2.*
before-merge/fusinvdeploy-2.3.0_Initial
Other
before-merge/fusinvdeploy-OCSDeploy
before-merge/fusinvinventory-2.*
before-merge/fusinvinventory-2.3.0-1-BETA2
before-merge/fusinvinventory-2.3.0-1-RELEASE
before-merge/fusinvinventory-2.3.0-BETA4
before-merge/fusinvinventory-2.3.1-1-RELEASE
before-merge/fusinvinventory-2.3.2-1-RELEASE
before-merge/fusinvinventory-2.4.0-BETA1
before-merge/fusinvinventory-2.4.0-RELEASE
before-merge/fusinvsnmp-2.*
before-merge/fusinvsnmp-2.3.0-1-BETA2
before-merge/fusinvsnmp-2.3.0-1-RELEASE
before-merge/fusinvsnmp-2.3.0-BETA4
before-merge/fusinvsnmp-2.3.1-1-RELEASE
before-merge/fusinvsnmp-2.3.2-1-RELEASE
before-merge/fusinvsnmp-2.4.0-BETA1
before-merge/fusinvsnmp-2.4.0-RELEASE
before-merge/fusioninventory-2.*
before-merge/fusioninventory-2.2.0
before-merge/fusioninventory-2.2.0-BETA4
before-merge/fusioninventory-2.3.0-BETA2
before-merge/fusioninventory-2.3.0-BETA4
before-merge/fusioninventory-2.3.0-RELEASE
before-merge/fusioninventory-2.3.1-RELEASE
before-merge/fusioninventory-2.3.2-RELEASE
before-merge/fusioninventory-2.4.0-BETA1
before-merge/fusioninventory-2.4.0-RELEASE
glpi0.*
glpi0.80+1.2
glpi0.80+1.3
glpi0.83+1.0
glpi0.84+1.0
glpi084+1.*
glpi084+1.0
glpi085+1.*
glpi085+1.0
glpi085+1.1
glpi085+1.2
glpi085+1.3
glpi090+1.*
glpi090+1.0
glpi090+1.1
glpi090+1.2
glpi090+1.3
glpi9.*
glpi9.1+1.0
glpi9.2+1.0-RC1
glpi9.3+1.0
glpi9.3+1.1
glpi9.3+1.2
glpi9.3+1.3
glpi9.4.0+1.0