CVE Daily

CVE-2025-53111

GLPI is a Free Asset and IT Management Software package. In versions 0.80 throug...

Medium CVSS 6.5

Overview

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19.

CWE: CWE-284 Published: 2025-07-30T15:15:34.617
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags