CVE-2025-25192
GLPI allows unauthorized access to debug mode
Résumé
GLPI allows unauthorized access to debug mode
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the install/update.php file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web vicarius.io
- web vicarius.io