Glpi-project vulnerabilities
188 CVEs and advisories name Glpi-project as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-31061SQL injection on login page in GLPI
- CVE-2022-31068Sensitive Data Exposure on Refused Inventory Files in GLPI
- CVE-2022-31056SQL injection with _actor parameter in GLPI
- CVE-2022-31082SQL Injection via package deployment tasks in glpi-inventory-plugin
- CVE-2022-31062Unauthenticated Local File Inclusion
- CVE-2022-29250SQL injection in GLPI
- CVE-2022-24876Stored cross site scrpting in GLPI's Kanban
- CVE-2022-24869Cross Site Scripting in GLPI
- CVE-2022-24868Cross site scripting via SVG file upload in GLPI
- CVE-2022-24867LDAP password exposure in glpi
- CVE-2021-39213IP restriction on GLPI API Bypass with custom header injection
- CVE-2021-39211Disclosure of GLPI and server information in telemetry endpoint
- CVE-2021-39210Autologin cookie accessible by scripts
- CVE-2021-39209Bypassable CSRF protection
- CVE-2021-21324Insecure Direct Object Reference (IDOR) on "Solutions"
- CVE-2021-21325Stored XSS in budget type
- CVE-2021-21326Horizontal Privilege Escalation
- CVE-2021-21327Unsafe Reflection in getItemForItemtype()
- CVE-2021-21314XSS injection on ticket update
- CVE-2021-21312Stored XSS on documents
- CVE-2021-21313XSS on tabs
- CVE-2021-21258XSS injection in ajax/kanban
- CVE-2021-21255entities switch IDOR
- CVE-2020-26212Any GLPI CalDAV calendars is read-only for every authenticated user
- CVE-2020-15226SQL Injection in GLPI Search API
- CVE-2020-15217User data exposure in GLPI
- CVE-2020-15177Unauthenticated Stored XSS in GLPI
- CVE-2020-15176SQL injection in GLPI
- CVE-2020-15175Unauthenticated File Deletion in GLPI
- CVE-2020-11031Insecure encryption algorithm in GLPI