Servers and applications
CVE-2021-21327
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 non-authenticated user can remotely instantiate object of any class existing in the GLPI environment that can be used to carry out malicious attacks, or to start a “POP chain”. As an example of direct impact, this…
- Severity
- High 7.5
- Published
- 8 Mar 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.5.4
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GLPIServers and applications · cpe:a:glpi-project:glpi |
|