2 matches found
CVE-2025-65035: Deserialization of Untrusted Data
pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions database write access must first be obtained through another vulnerability or misconfiguration...
6.4CVSS6AI score0.00324EPSS
SaveExploits0References1
CVE-2025-53360: Improper Access Control
pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3...
4.3CVSS5.7AI score0.00292EPSS
SaveExploits0References1
20