Skip to content
OpenAdvisories

Vendor

glpi-project

188 known vulnerabilities.

Products

glpi 178 glpi-inventory-plugin 7 glpi-agent 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-37147 Public exploit

    GLPI allows Authenticated File Upload to Restricted Tickets

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to …

    glpi-project glpi glpi Ubuntu
  • Medium 5.3
    CVE-2024-27914 Public exploit

    Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulne…

    glpi-project glpi glpi Ubuntu
  • Medium 5.3
    CVE-2022-31062 Public exploit

    Unauthenticated Local File Inclusion

    ### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file can be deleted if deploy feature is not used.

    glpi-project glpi-inventory-plugin