CVE-2025-32786
GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection
Summary
GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection
Original description
The description as published by the source.
The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com