GLPI is a free asset and IT management software package
In GLPI versions 11.0.0 through 11.0.6, an authenticated user with 'READ' permission for forms can export the structure of forms they are not authorized to access. This allows them to view the design and fields of sensitive forms without proper permissions. The vulnerability specifically affects the export functionality.
GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue has been fixed in version 11.0.7.
Authenticated GLPI users with forms READ permission are at risk of unauthorized form structure export, presenting a low severity information exposure for form metadata.
Monitor & Review
Low severity — keep this CVE on your radar and patch during routine maintenance.
What should I do?
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform