CVE-2025-64516 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticke…
High CVSS: 7.5

CVE-2025-64516

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticket, asset, ...). If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed in 10.0.21 and 11.0.3.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-284
Yayın Tarihi
2026-01-15 16:16:11
Güncelleme
2026-01-21 20:53:37
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-284 Glpi HIGH Glpi-project 2026

Referanslar

https://github.com/glpi-project/glpi/commit/51412a89d3174cfe22967b051d527febdbceab3c https://github.com/glpi-project/glpi/commit/ee7ee28e0645198311c0a9e0c4e4b712b8788e27 https://github.com/glpi-project/glpi/releases/tag/10.0.21 https://github.com/glpi-project/glpi/releases/tag/11.0.3 https://github.com/glpi-project/glpi/security/advisories/GHSA-487h-7mxm-7r46