CVE-2024-56801 - CVE House

Status published Medium CVE-2024-56801

Tasklists has Blind SQL Injection in /ajax/reorder.php

6.9 CVSS

Vulnerability Description

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-56801

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from InfotelGLPI

View All →

CVE-2022-39398

InfotelGLPI vulnerable to Cross-site Scripting

High 8.8

Affected Vendor

InfotelGLPI

View all reports →

Affected Software

tasklists

Vulnerable Versions:

< 2.0.4

Timeline

Official Publish: December 30th, 2024

Last Modified: December 30th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1059 Command and Scripting Interpreter

Execution

T1213.006 Databases

Collection

T1485 Data Destruction

Impact