Summaryinfo

A vulnerability marked as problematic has been reported in GLPI up to 10.0.17. This impacts an unknown function of the file status.php. Performing a manipulation of the argument Name results in information disclosure. This vulnerability is identified as CVE-2025-21626. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in GLPI up to 10.0.17. This affects an unknown code of the file status.php. The manipulation of the argument name with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the `status.php` endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the `status.php` file, restrict its access, or remove any sensitive values from the `name` field of the active LDAP directories, mail servers authentication providers and mail receivers.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2025-21626 since 12/29/2024. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

By approaching the search of inurl:status.php it is possible to find vulnerable targets with Google Hacking. The vulnerability scanner Nessus provides a plugin with the ID 237566 (FreeBSD : glpi-project -- GLPI multiple vulnerabilities (c36decbe-3c84-11f0-8d29-b42e991fc52e)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 10.0.18 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (237566). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Asset Management Software

Name

• GLPI

Version

• 10.0.0
• 10.0.1
• 10.0.2
• 10.0.3
• 10.0.4
• 10.0.5
• 10.0.6
• 10.0.7
• 10.0.8
• 10.0.9
• 10.0.10
• 10.0.11
• 10.0.12
• 10.0.13
• 10.0.14
• 10.0.15
• 10.0.16
• 10.0.17

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion