CVE-2022-39323highCWE-89

CVE-2022-39323: high-severity vulnerability in glpi-project glpi

SQL Injection on REST API in GLPI

Published · Updated

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 34%
exploitation probability
34%top 2% of all CVEs
observed exploitation
nono source reports it
In short

GLPI's REST API has a SQL injection vulnerability in the user_token parameter that allows attackers to extract sensitive data through time-based attacks. This flaw lets unauthorized users bypass authentication and access or manipulate the system's database.

Technical detail

A time-based SQL injection vulnerability exists in the GLPI REST API's user_token authentication mechanism (CWE-89), allowing remote attackers to execute arbitrary SQL queries without authentication. The attack exploits insufficient input validation in the API endpoint, enabling data exfiltration through timing side-channels; patched in version 10.0.4.

Summary generated and translated by AI from the official description.
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST user_token. This issue has been patched, please upgrade to version 10.0.4. As a workaround, disable login with user_token on API Rest.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
glpi-project · glpi
Related CVEs — glpi-project glpi

In the same product, most dangerous first.

CVE-2025-24799HIGHGLPI allows unauthenticated SQL injection through the inventory endpointEPSS 86.7%CVE-2020-15175HIGHUnauthenticated File Deletion in GLPIEPSS 71.5%CVE-2023-46727HIGHGLPI SQL injection through inventory agent requestEPSS 67.7%CVE-2024-29889HIGHGLPI contains an SQL injection through the saved searchesEPSS 63.0%CVE-2024-31456HIGHGLPI contains an authenticated SQL injectionEPSS 59.1%CVE-2024-27096HIGHSQL Injection in through the search engineEPSS 58.8%
References
https://github.com/glpi-project/glpi/security/advisories/GHSA-cp6q-9p4x-8hr9