Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-47761

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue.

Published

2024-12-11T17:15:16.753

Last Modified

2025-01-23T20:37:11.150

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	glpi-project	glpi	< 10.0.17	Yes

References

https://github.com/glpi-project/glpi/releases/tag/10.0.17 Release Notes ([email protected])
https://github.com/glpi-project/glpi/security/advisories/GHSA-x794-564w-vgxx Vendor Advisory ([email protected])