Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-64520

Опубликовано: 16 дек. 2025
Источник: nvd
CVSS3: 6.5
CVSS3: 4.3
EPSS Низкий

Описание

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Версия от 9.1.0 (включая) до 10.0.21 (исключая)

EPSS

Процентиль: 13%
0.00042
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

CVSS3: 6.5
debian
3 месяца назад

GLPI is a free asset and IT management software package. Starting in v ...

CVSS3: 4.3
redos
8 дней назад

Уязвимость glpi

EPSS

Процентиль: 13%
0.00042
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862