CVE-2025-64520

Medium CVSS: 6.5

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Vendor

Glpi-project

Product

Glpi

CWE

CWE-862

Yayın Tarihi

2025-12-16 22:15:48

Güncelleme

2026-02-19 16:20:09

Source Identifier

security-advisories@github.com

KEV Date Added

Kategoriler

CWE-862 Glpi MEDIUM Glpi-project 2025

Referanslar

https://github.com/glpi-project/glpi/commit/a3d5cc4a63ae592c0b5592ebe6d562164904dab3 https://github.com/glpi-project/glpi/security/advisories/GHSA-62p9-prpq-j62q

Benzer Kayıtlar

High

CVE-2026-26001

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents…

Medium

CVE-2026-25590

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents…

Medium

CVE-2026-22821

mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vul…

Medium

CVE-2026-22044

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can…

Medium

CVE-2026-22247

GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can…

Medium

CVE-2026-23624

GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.…