PT-2025-34874

CVE-2025-53105

Published

2025-08-07

Updated

2025-09-11

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.18

Description: GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. A connected user without administration rights can change the rules execution order. This issue was addressed in version 10.0.19.

Recommendations: Update to version 10.0.19 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Cconard96

Vendors

Affected products

Weakness enumeration

CWE-269: Improper Privilege Management

Related identifiers