CVE-2022-31068

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.2

Description The issue affects GLPI instances with the native inventory used, potentially leaking sensitive information due to a lack of authentication in the feature to get refused files.

Recommendations For versions prior to 10.0.2, upgrade to version 10.0.2 to address the issue. As a temporary workaround, consider restricting access to the native inventory feature until the upgrade is applied.