CVE-2025-53111

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

History

04 Aug 2025, 18:56

Type Values Removed Values Added
References () https://github.com/glpi-project/glpi/security/advisories/GHSA-p665-mqcr-j96j - () https://github.com/glpi-project/glpi/security/advisories/GHSA-p665-mqcr-j96j - Vendor Advisory
CPE cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
First Time Glpi-project
Glpi-project glpi

30 Jul 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-30 15:15

Updated : 2025-08-04 18:56


NVD link : CVE-2025-53111

Mitre link : CVE-2025-53111


JSON object : View

Products Affected

glpi-project

  • glpi
CWE
CWE-862

Missing Authorization

CWE-284

Improper Access Control