CVE-2025-53112

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 9.1.0 through 10.0.18, a lack of permission checks can result in unauthorized removal of some specific resources. This is fixed in version 10.0.19.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

History

04 Aug 2025, 18:56

Type Values Removed Values Added
References () https://github.com/glpi-project/glpi/security/advisories/GHSA-rp7w-6343-3m2r - () https://github.com/glpi-project/glpi/security/advisories/GHSA-rp7w-6343-3m2r - Vendor Advisory
First Time Glpi-project
Glpi-project glpi
CPE cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

30 Jul 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-30 15:15

Updated : 2025-08-04 18:56


NVD link : CVE-2025-53112

Mitre link : CVE-2025-53112


JSON object : View

Products Affected

glpi-project

  • glpi
CWE
CWE-862

Missing Authorization

CWE-284

Improper Access Control