CVE-2025-52897
GLPI is vulnerable to XSS and open redirection attacks through planning feature
Summary
GLPI is vulnerable to XSS and open redirection attacks through planning feature
Original description
The description as published by the source.
GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can send a malicious link to attempt a phishing attack from the planning feature. This is fixed in version 10.0.19.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov