CVE-2020-15108: GLPI-Project GLPI

High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days.

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

Affected products

• GLPI-Project GLPI: before 9.5.1 (fixed in 9.5.1)

Published 2020-07-17. Last modified 2026-06-17.