CVE-2026-23489 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from u…
Critical CVSS: 9.1

CVE-2026-23489

Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.
Vendor
Teclib-edition
Product
Fields
CWE
CWE-20
Yayın Tarihi
2026-03-16 18:16:06
Güncelleme
2026-03-18 13:57:05
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-20 Fields CRITICAL Teclib-edition 2026

Referanslar

https://github.com/pluginsGLPI/fields/releases/tag/1.23.3 https://github.com/pluginsGLPI/fields/security/advisories/GHSA-rj7q-mmx9-fhq7