The vulnerability of the GLPI system’s request, incident, and asset inventory processes, related to the failure to remove script-related HTML tags from the web page, allows a violator to execute arbitrary code.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the failure to remove script-related HTML tags from the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

CERTFR-2025-ACT-030

creationtimestamp| type| source ---|---|--- 2025-07-21 15:08:30+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3luibgnek2y2r 2025-07-21 15:08:31+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114891850304807565 2025-07-21 15:25:54+00:00| seen|...