CVE-2017-11475: GLPI-Project GLPI

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.

Affected products

• GLPI-Project GLPI: up to and including 9.1.5.0

Published 2017-07-20. Last modified 2026-06-17.