← Database

CVE-2025-23024

MEDIUM CVSS: 4.3 Published: 2025-02-25 Modified: 2026-06-17

Description

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anonymous user can disable all the active plugins. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.

Affected Platforms

Glpi-Project Glpi

Weakness Type

CWE-285, NVD-CWE-noinfo

References