Not scored
CVE-2025-24799
GLPI allows unauthenticated SQL injection through the inventory endpoint
glpi-projectglpi
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 26 Oct
87%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18.
Coverage 1 article · 1 outlet
- 83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting InfrastructureThe Hacker News · first in our coverage · mentions it in passing