GLPI is a free asset and IT management software package. From 11.0.0, < 11.0.3, an unauthenticated user can perform a SQL injection through the inventory endpoi…

GLPI, a free asset and IT management software package, contains a SQL injection vulnerability affecting versions 11.0.0 through 11.0.2. The vulnerability allows unauthenticated users to perform SQL injection attacks through the inventory endpoint. This represents a critical security flaw as it requires no authentication and could lead to database compromise. The vulnerability has been patched in version 11.0.3. Organizations using affected GLPI versions should immediately upgrade to the fixed version to prevent potential exploitation.