CVE-2025-25192 — GLPI allows unauthorized access to debug mode
GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 …
Published: 2025-02-25 · CVSS: 6.5 · CVSS 3.1
GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7