CVE-2025-24801 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. Thi…
High CVSS: 8.5

CVE-2025-24801

GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-434
Yayın Tarihi
2025-03-18 19:15:49
Güncelleme
2025-08-01 00:57:21
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-434 Glpi HIGH Glpi-project 2025

Referanslar

https://github.com/glpi-project/glpi/security/advisories/GHSA-g2p3-33ff-r555