PT-2025-34874

CVE-2025-53105

Publicado

2025-08-07

Atualizado

2025-09-11

Descrição por

CVSS 3.1

7.5

Alta

MétricasAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.18

Description: GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. A connected user without administration rights can change the rules execution order. This issue was addressed in version 10.0.19.

Recommendations: Update to version 10.0.19 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Cconard96

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-269: Improper Privilege Management

Identificadores relacionados