CVE-2025-25192 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information.…
Medium CVSS: 6.5

CVE-2025-25192

GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-200
Yayın Tarihi
2025-02-25 18:15:27
Güncelleme
2025-04-23 18:46:00
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-200 Glpi MEDIUM Glpi-project 2025

Referanslar

https://github.com/glpi-project/glpi/releases/tag/10.0.18 https://github.com/glpi-project/glpi/security/advisories/GHSA-86cx-hcfc-8mm8 https://www.vicarius.io/vsociety/posts/cve-2025-25192-detection-glpi-vulnerability https://www.vicarius.io/vsociety/posts/cve-2025-25192-mitigation-glpi-vulnerability