CVE-2025-32786highCWE-89

GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 6.6%

probabilidade de exploração

6.6%top 7% das CVEs

exploração observada

nãonenhuma fonte reporta

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

glpi-project · glpi-inventory-plugin

Referências

https://github.com/glpi-project/glpi-inventory-plugin/blob/1.5.1/CHANGELOG.md https://github.com/glpi-project/glpi-inventory-plugin/releases/tag/1.5.1 https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-w2cp-r675-6xpq