cvedb.io
CVE-2025-64520
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2025-12-16T22:15:48.250 · Last modified 2026-06-17T09:54:31.630

Summary

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Affected products

glpi-project — glpi

Does this affect you?

Add your gear to cvedb and we'll alert you only when glpi-project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.