CVE-2025-23024 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anonymous user can disable all the active plu…
Medium CVSS: 6.9

CVE-2025-23024

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anonymous user can disable all the active plugins. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-285
Yayın Tarihi
2025-02-25 16:15:38
Güncelleme
2025-03-04 14:39:12
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-285 Glpi MEDIUM Glpi-project 2025

Referanslar

https://github.com/glpi-project/glpi/releases/tag/10.0.18 https://github.com/glpi-project/glpi/security/advisories/GHSA-885x-hvp2-85q8