UpHeron
All vulnerabilities

Servers and applications

CVE-2024-11955

Open Redirection

Severity
Medium 5.3
Published
25 Feb 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.0.18
Also known as
GHSA-g5fm-jq4j-c2c7
Sources
NVD, Project advisories (GitHub)

Description

A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument redirect leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 10.0.18 is able to address this issue. It…

Affected software

SoftwareAffected versions
GLPIServers and applications · cpe:a:glpi-project:glpi
  • From 0.85 before 10.0.18
GLPIServers and applications · github:glpi-project/glpi
  • From 0.85 before 10.0.18

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-11955
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-11955
  • GitHub Advisory Database https://github.com/advisories/GHSA-g5fm-jq4j-c2c7
  • github.com https://github.com/glpi-project/glpi/security/advisories/GHSA-g5fm-jq4j-c2c7