{"id":"CVE-2019-10477","details":"The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.","modified":"2026-08-14T04:01:09.721591495Z","published":"2019-03-29T14:29:00.530Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"1.4"}],"source":"CPE_RANGE","vendor_product":"fusioninventory:fusioninventory","cpes":["cpe:2.3:a:fusioninventory:fusioninventory:*:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.3%2B1.4"},{"type":"ADVISORY","url":"https://github.com/fusioninventory/fusioninventory-for-glpi/releases/tag/glpi9.4%2B1.1"},{"type":"FIX","url":"https://github.com/fusioninventory/fusioninventory-for-glpi/commit/0f777f85773b18f5252e79afa1929fcdc4858c3a"},{"type":"FIX","url":"https://github.com/fusioninventory/fusioninventory-for-glpi/compare/260a864...e1f776d"},{"type":"FIX","url":"https://github.com/fusioninventory/fusioninventory-for-glpi/compare/cec774a...baa4158"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/fusioninventory/fusioninventory-agent","events":[{"introduced":"0"},{"fixed":"dcf7ac2a27d27c23289fd8a9798b9f885106a019"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.1"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:fusioninventory:fusioninventory:*:*:*:*:*:*:*:*"}}],"versions":["1.1_beta1","1.0.1","0.0.9.1","0.0.9","0.0.8.1","0.0.8","0.0.7.2","0.0.7.1","0.0.7","0.0.6.2","0.0.6.1","0.0.6","0.0.5","0.0.4","0.0.3","0.0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10477.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/fusioninventory/fusioninventory-for-glpi","events":[{"introduced":"0"},{"fixed":"0f777f85773b18f5252e79afa1929fcdc4858c3a"},{"fixed":"e1f776de0f055d6b27e753b6c2a5261b4510c86d"},{"fixed":"baa4158beaa6ba93514d5daddb3f404addd10022"}],"database_specific":{"source":"REFERENCES"}}],"versions":["glpi9.4.0+1.0","glpi9.3+1.3","glpi9.3+1.2","glpi9.3+1.1","glpi9.3+1.0","glpi9.2+1.0-RC1","glpi9.1+1.0","glpi090+1.3","glpi090+1.2","glpi090+1.1","glpi090+1.0","glpi085+1.3","glpi085+1.2","glpi085+1.1","glpi085+1.0","glpi084+1.0","glpi0.84+1.0","before-merge/fusioninventory-2.4.0-BETA1","2.4.0-BETA1","before-merge/fusioninventory-2.2.0","2.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10477.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}