CVE-2025-24801

🗓️ 18 Mar 2025 18:32:06Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 122 Views🌐 WEB

Vulnerability in GLPI allows file upload and execution by authenticated users; fixed in version 10.0.18.

Reporter	Title	Published	Views	Family All 48
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Glpi-Project Glpi	19 Apr 202501:59	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Glpi-Project Glpi	5 May 202523:22	–	githubexploit
BDU FSTEC	The vulnerability of the Inventory module in the GLPI system, which handles requests, incidents, and inventory management of computer equipment, allows a perpetrator to execute arbitrary codes.	24 Mar 202500:00	–	bdu_fstec
FreeBSD	glpi-project -- GLPI multiple vulnerabilities	25 Feb 202500:00	–	freebsd
Circl	CVE-2025-24801	12 Mar 202510:58	–	circl
CNNVD	GLPI 代码问题漏洞	18 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-24801 GLPI allows authenticated remote code execution	18 Mar 202518:32	–	cvelist
EUVD	EUVD-2025-6705	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : glpi-project -- GLPI multiple vulnerabilities (c36decbe-3c84-11f0-8d29-b42e991fc52e)	30 May 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-24801	18 Aug 202500:00	–	nessus

NVD

Vulners

Node

glpi-project glpiRange0.85–10.0.18

[
  {
    "vendor": "glpi-project",
    "product": "glpi",
    "versions": [
      {
        "version": ">= 0.85, < 10.0.18",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/glpi-project/glpi/security/advisories/GHSA-g2p3-33ff-r555

Parameter	Position	Path	Description	CWE
csrf_token	request body	front/login.php	Login flow CSRF token retrieval and authentication to establish a session.	CWE-434
username	request body	front/login.php	Login flow CSRF token retrieval and authentication to establish a session.	CWE-434
password	request body	front/login.php	Login flow CSRF token retrieval and authentication to establish a session.	CWE-434
csrf_token	request body	front/documenttype.form.php?id=1	Enable PHP file uploads by modifying allowed extensions for document types.	CWE-434
extensions	request body	front/documenttype.form.php?id=1	Enable PHP file uploads by modifying allowed extensions for document types.	CWE-434
csrf_token	request body	ajax/fileupload.php	Upload a PHP reverse shell via AJAX file upload endpoint using an authenticated session.	CWE-434
file	request body	ajax/fileupload.php	Upload a PHP reverse shell via AJAX file upload endpoint using an authenticated session.	CWE-434
filename	request body	ajax/fileupload.php	Upload a PHP reverse shell via AJAX file upload endpoint using an authenticated session.	CWE-434

17 Jun 2026 08:59Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.5 - 8.8

EPSS0.17467

SSVC

CWE-434