PT-2025-31388

CVE-2025-53112

Published

2025-07-29

Updated

2025-10-07

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GLPI versions 9.1.0 through 10.0.18

Description GLPI is an Asset and IT Management Software package providing ITIL Service Desk features, licenses tracking, and software auditing. A lack of permission checks in affected versions can result in unauthorized removal of specific resources.

Recommendations Update to version 10.0.19 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

CWE-862: Missing Authorization

Related identifiers