Security Advisory

CVE-2025-52897

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-30 14:07:58
Last updated 2025-07-30 19:28:12
Assigner GitHub_M
State PUBLISHED

Description

GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can send a malicious link to attempt a phishing attack from the planning feature. This is fixed in version 10.0.19.