CVE-2024-47760 — GLPI vulnerable to account takeover via API
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the API can take control of an ac…
Published: 2024-12-11 · CVSS: 7.5 · CVSS 4.0
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the API can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7