cve.bz

glpi-project glpi vulnerabilities, newest first, page 4

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 5.4CVE-2022-24868EPSS 0.6%

    GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can exploit a lack of sanitization on SVG file uploads and inject j…

  2. 7.5CVE-2022-24867EPSS 1.3%

    GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass i…

  3. 9.8CVE-2021-44617EPSS 2.1%

    A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated.

  4. 4.9CVE-2022-21720EPSS 1.1%

    GLPI is a free asset and IT management software package. Prior to version 9.5.7, an entity administrator is capable of retrieving normally inaccessible data via SQL injection. Version 9.5.7 contains a patch for this issue. As a workaround,…

  5. 6.1CVE-2022-21719EPSS 1.1%

    GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9.5.7 contains a patch for this issue. There are no known workarounds.

  6. 8.8CVE-2021-39213EPSS 1.0%

    GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may…

  7. 5.3CVE-2021-39211ExploitEPSS 4.5%

    GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server information. This issue is fixed in version 9.5.6. As a workaround, remove the fi…

  8. 6.5CVE-2021-39210EPSS 1.0%

    GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, the cookie used to store the autologin cookie (when a user uses the "remember me" feature) is accessible by scripts. A malicious plugin that could steal t…

  9. 8.8CVE-2021-39209EPSS 0.5%

    GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can bypass Cross-Site Request Forgery (CSRF) protection in many places. This could allow a malicious actor to perform many…

  10. 6.1CVE-2021-3486EPSS 1.4%

    GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.

  11. 7.5CVE-2021-21327EPSS 2.5%

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 non-authenticated user can remotely instantiate object of any c…

  12. 6.5CVE-2021-21326EPSS 1.4%

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-ser…

  13. 4.8CVE-2021-21325EPSS 0.6%

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 a new budget type can be defined by user. This input is not cor…

  14. 6.5CVE-2021-21324EPSS 1.4%

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 there is an Insecure Direct Object Reference (IDOR) on "Solutio…

  15. 4.8CVE-2021-21314EPSS 0.6%

    GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while u…

  16. 6.1CVE-2021-21313EPSS 0.9%

    GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, …

  17. 4.8CVE-2021-21312EPSS 0.6%

    GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function (Ho…

  18. 5.4CVE-2021-21258EPSS 0.6%

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injecti…

  19. 5.7CVE-2021-21255EPSS 0.9%

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch entities with IDOR from a logged in user. T…

  20. 4.3CVE-2020-27663EPSS 0.9%

    In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).

  21. 4.3CVE-2020-27662EPSS 0.9%

    In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database table (e.g., glpi_tickets, glpi_users, etc.).

  22. 6.5CVE-2020-26212EPSS 1.2%

    GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.3, any authent…

  23. 4.3CVE-2020-15226EPSS 1.0%

    In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break the SQL syntax, but it is also possible to utilise a UNION SELECT query to reflect sensitive information such as the curr…

  24. 5.3CVE-2020-15217EPSS 1.0%

    In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to the FAQ.

  25. 6.1CVE-2020-15177EPSS 0.8%

    In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_base` and `url_base_api`. These settings are referenced throughout the application and allow for vulnerabilities like C…

  26. 8.6CVE-2020-15176EPSS 1.1%

    In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulnerability an attacker is able to exfiltra…

  27. 9.1CVE-2020-15175EPSS 70%

    In GLPI before version 9.5.2, the `​pluginimage.send.php​` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes a…

  28. 7.5CVE-2020-11031EPSS 0.3%

    In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9…

  29. 7.1CVE-2020-15108EPSS 1.2%

    In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

  30. 5.4CVE-2020-11062EPSS 0.5%

    In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type. This has been fixed in version 9.4.6.

  31. 8.8CVE-2020-11060ExploitEPSS 11%

    In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the difficulty of the expl…

  32. 5.3CVE-2020-5248EPSS 1.5%

    GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key …

  33. 5.4CVE-2020-11036EPSS 0.8%

    In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with content "<script>alert(1)</script>" reproduce…

  34. 9.3CVE-2020-11035EPSS 0.9%

    In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6.

  35. 6.1CVE-2020-11034ExploitEPSS 7.6%

    In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6.

  36. 7.2CVE-2020-11033EPSS 1.0%

    In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All api_tokens which can be used to do privile…

  37. 7.2CVE-2020-11032EPSS 1.0%

    In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6.

  38. 7.5CVE-2013-2227ExploitEPSS 13%

    GLPI 0.83.7 has Local File Inclusion in common.tabs.php.

  39. 8.8CVE-2019-14666EPSS 2.2%

    GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authen…

  40. 5.4CVE-2019-1010307EPSS 0.7%

    GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The …

  41. 3.5CVE-2019-1010310EPSS 0.7%

    GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The co…

  42. 5.9CVE-2019-13240EPSS 1.7%

    An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address.

  43. 6.1CVE-2019-13239EPSS 1.3%

    inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.

  44. 8.1CVE-2019-10233EPSS 1.4%

    Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.

  45. 8.8CVE-2018-13049EPSS 1.2%

    The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.

  46. 6.1CVE-2018-7563EPSS 1.1%

    An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, wil…

  47. 7.5CVE-2018-7562EPSS 1.7%

    A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a fil…

  48. 9.8CVE-2017-11184EPSS 1.8%

    SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.

  49. 4.9CVE-2017-11183EPSS 1.3%

    front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.

  50. 8.8CVE-2017-11475EPSS 1.4%

    GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.