CVE-2025-52897
GLPI is vulnerable to XSS and open redirection attacks through planning feature
Résumé
GLPI is vulnerable to XSS and open redirection attacks through planning feature
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can send a malicious link to attempt a phishing attack from the planning feature. This is fixed in version 10.0.19.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov