Medium severity4.3NVD Advisory· Published Feb 25, 2025· Updated Jun 17, 2026
CVE-2024-11955
CVE-2024-11955
Description
A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument redirect leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 10.0.18 is able to address this issue. It is recommended to upgrade the affected component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*range: >=0.85,<10.0.18
- (no CPE)
- (no CPE)range: <=10.0.17
Patches
Vulnerability mechanics
References
5- vuldb.comnvdExploitThird Party Advisory
- github.com/glpi-project/glpi/security/advisories/GHSA-g5fm-jq4j-c2c7nvdVendor Advisory
- github.com/glpi-project/glpi/releases/tag/10.0.18nvdRelease Notes
- vuldb.comnvdPermissions Required
- vuldb.comnvdPermissions Required
News mentions
0No linked articles in our index yet.