LiveActive security incident?Get immediate response
CVE Record

CVE-2019-12723: An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via container_id and old_order parameters to ajax/reorder.php by an unauthenticated user.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

CVE-2019-12723 is an unauthenticated SQL injection in the Teclib Fields plugin for GLPI through version 1.9.2. A vulnerable deployment could let an outside attacker manipulate database queries through the plugin endpoint, creating risk to GLPI data confidentiality and integrity.

Executive priority

Treat this as a high-priority remediation for any GLPI environment using the Fields plugin. Internet-facing service desks should be addressed first because the CVE describes unauthenticated access.

Technical view

The CVE states that ajax/reorder.php in the GLPI Fields plugin accepts container_id and old_order in a way that permits SQL injection by an unauthenticated user. The source bundle identifies versions through 1.9.2 as affected and references pull request 317 and release 1.10.0.

Likely exposure

Organizations are likely exposed if they run GLPI with the Teclib Fields plugin version 1.9.2 or earlier, especially where the GLPI application is internet-facing or reachable by untrusted users.

Exploitation context

The source bundle does not show CISA KEV listing or cited evidence of active exploitation. The main concern is unauthenticated SQL injection, which is generally serious because it can affect application database contents without prior login.

Researcher notes

Evidence is concise but clear on affected component, endpoint, parameters, and unauthenticated SQL injection. Missing details include CVSS score, CWE mapping, CPEs, and confirmed exploitation status, so risk rating depends on deployment exposure.

Mitigation direction

  • Upgrade the GLPI Fields plugin to version 1.10.0 or later where supported.
  • Check vendor release notes and pull request 317 for the intended remediation.
  • Restrict untrusted network access to GLPI until the plugin is remediated.
  • If immediate upgrade is blocked, review whether the vulnerable plugin can be disabled safely.

Validation and detection

  • Inventory GLPI installations and identify installed Fields plugin versions.
  • Confirm no deployment is running Fields plugin version 1.9.2 or earlier.
  • Review access logs for unusual requests to the plugin reorder endpoint.
  • Verify the upgrade or disablement in staging before production rollout.
Prepared
Confidence
medium
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

description · low confidence lookup

Database behavior lookup

The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2019-12723 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
4Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.