QwikSec

Security Database

CVE

CWE

Training

CVE-2025-23024

Published: Feb 25, 2025

Modified: Feb 25, 2025

PUBLISHED

Description

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anonymous user can disable all the active plugins. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.

Vendor	Product	Versions
glpi-project	glpi	affected `>= 0.72, < 10.0.18`

Weaknesses (CWE)

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-885x-hvp2-85q8

x_refsource_CONFIRM

https://github.com/glpi-project/glpi/releases/tag/10.0.18

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.