← Database

CVE-2025-25192

MEDIUM CVSS: 6.5 Published: 2025-02-25 Modified: 2026-06-17

Description

GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.

Affected Platforms

Glpi-Project Glpi

Weakness Type

CWE-200, NVD-CWE-noinfo

References