Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 16, 2026 · NIST NVD

   Detected

   Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.

2. Jun 17, 2026 · NIST NVD

   Updated

   Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.

Affected

• cpe teclib-edition/fieldsversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-23489

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-23489

  Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.

  nvd.nist.gov

References

• Product · github.com
• Vendor Advisory · github.com