by Kastro
Paper/Archive/CVE-2020-11035

CVE-2020-11035

glpi-project GLPI — weak CSRF tokens in GLPI

EPSS 0.9%CVSS 9.3
critical.is priorityof 100
40
CVSS 9.3 (NVD)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 59.6.596 × 2011.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6.

Affected

ProductAffectedFixed inSource
GLPI> 0.83.3, < 9.4.6–CNA

Scores by source

NVD9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
GitHub_M (CNA)7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

References

refgithub.com/glpi-project/glpi/security/advisories/GHSA-w7q8-58qp-vmpfadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6Ladvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC