CVE catalog

CVE-2023-51446

UBUNTU-CVE-2023-51446

Severity: Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: Jan 1, 2023, 12:00:00 AM UTC
Updated: Oct 24, 2025, 5:02:23 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.87% · Oct 25, 2026

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	glpi	16.04	`0.84.8+dfsg.1-1`	vulnerable
Ubuntu	glpi	16.04	`0.84.8+dfsg.1-1ubuntu1`	vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 6:30:33 PM UTC

References

[https://osv.dev/vulnerability/UBUNTU-CVE-2023-51446]
[https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-51446.json]

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]