Skip to content
OpenAdvisories

Package · Ubuntu

glpi

195 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-13490

    glpi-project glpi Document document.send.php canViewFile authorization

    A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file front/document.send.php of the component Document Handler. Such manipulation of the argument docid leads to autho…

    GLPI glpi glpi Ubuntu
  • Low 2.7
    CVE-2025-53113

    GLPI technicians can access unauthorized information through external links

    GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use the e…

    GLPI glpi glpi Ubuntu
  • Low 3.5
    CVE-2025-52567

    GLPI has overly permissive URL verification

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 0.84 through 10.0.18, usage of RSS feeds or external calendars when planning is subject to SSRF exploit. T…

    GLPI glpi glpi Ubuntu
  • Low 2.6
    CVE-2022-39376

    Improper input validation on emails links in GLPI

    GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Users may be able to inject custom fields values in `mailto` li…

    GLPI glpi glpi Ubuntu
  • Low 3.5
    CVE-2022-39372

    Stored Cross-Site Scripting (XSS) in user information in GLPI

    GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Authenticated users may store malicious code in their account i…

    GLPI glpi glpi Ubuntu
  • Low 3.5
    CVE-2022-39276

    Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning

    GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or an external calendar in planning is subje…

    GLPI glpi glpi Ubuntu
  • Low 3.5
    CVE-2022-36112

    Blind Server-Side Request Forgery (SSRF) in GLPI

    GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in planning is subject to…

    GLPI glpi glpi Ubuntu