CVE-2025-24801
CVSS 3.1 Score 8.5 of 10 (high)
Details
Published Mar 18, 2025
CWE ID 434
Summary
CVE-2025-24801 is a vulnerability affecting GLPI, a free IT management software. An authenticated user can exploit this issue by uploading *.php files, which are then executed on the server. This security flaw poses a significant risk and has been addressed in GLPI version 10.0.18. It is crucial for GLPI users to update their software to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GLPI Project
Affected Vendors
- Teclib