CVE-2022-39234

8.8 highEPSS 0.5%

High (8.8) in glpi-project glpi. EPSS 0.5% chance of exploitation in the next 30 days.

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Deleted/deactivated user could continue to use their account as long as its cookie is valid. This issue has been patched, please upgrade to version 10.0.4. There are currently no known workarounds.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2022-11-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

glpi-project:glpi

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-pgcx-mc58-3gmg
https://github.com/glpi-project/glpi/security/advisories/GHSA-pgcx-mc58-3gmg

Check your stack JSON