GLPI <9.4.6 - Open Redirect

披露于 2020/05/05 · 更新于 2025/07/26

CVSS 评分6.1/ 10.0

EPSS 概率40.7%百分位 97.2%

漏洞描述

GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 GLPI 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2025-24799 GLPI < 10.0.17 - Pre-Auth SQL Injection GLPI	高危	7.5	60.1%	PoCEXP	2025/01/23
glpi_installer GLPI Installation Page - Exposure GLPI	高危	—	—	PoCEXP	2024/05/29
CVE-2024-29889 GLPI 10.0.10-10.0.14 - SQL Injection GLPI	高危	7.1	51.9%	PoCEXP	2024/03/21
glpi_default_loginRCE GLPI Default Login GLPI	高危	—	—	PoCEXP	2023/11/27
glpi_directory_listing GLPI Directory Listing GLPI	低危	—	—	PoCEXP	2023/10/20
CVE-2022-35914RCE GLPI <=10.0.2 - Remote Command Execution GLPI	严重	9.8	94.4%	PoCEXP	2022/09/20