Skip to content
Threat Feed
Subscribe

Product

GLPI (< 10.0.28)

1 brief RSS
high advisory

GLPI: Remote Code Execution via Local File Inclusion (CVE-2025-24801)

GLPI versions before 10.0.18 are vulnerable to remote code execution through Local File Inclusion, where authenticated users can modify file extension allowlists to execute arbitrary PHP payloads.

GLPI +2 privilege-escalation web-application
1r 2t 2c updated