Several security flaws found in GLPI; update recommended
French cyber agency CERT-FR has warned of several security flaws in GLPI, an open-source IT service management tool. Attackers could exploit them to gain higher access rights, inject malicious scripts into web pages, or bypass security rules. Versions 11.0.x before 11.0.10 and versions before 10.0.28 are affected, and the fix is to apply the updates listed in GLPI's own security bulletins.
This summary was generated by AI; the official source prevails.
What does it mean?
GLPI is software that organizations use to track IT equipment and support requests. Attackers could use these flaws to take more control of the system than they should have. Organizations running older GGLPI versions need to install the updates from the developer.
Who is affected?
Organizations running GLPI versions 11.0.x before 11.0.10 or versions before 10.0.28, and their staff who use it.