7.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
27.5%
GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.
github.com/glpi-project/glpi/commit/58c67d78f2e3ad08264213e9aaf56eab3c9ded35
github.com/glpi-project/glpi/releases/tag/10.0.12
github.com/glpi-project/glpi/security/advisories/GHSA-p995-jmfv-c7r8