Approved changes feed: RSS · Atom

cpe:2.3:a:glpi-project:glpi:9.5.3:*:*:*:*:*:*:*

part: a version: 9.5.3 update: *

VendorGlpi Project (bef553f0-49a5-5069-ba42-78448263cef9)
ProductGlpi (5fde319e-7958-54ba-bdc3-1448651b65ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/mrlioncub/glpi purl2cpe 2026-06-01 10:15:46.950941
pkg:github/glpi-project/glpi purl2cpe 2026-06-01 10:15:46.950942

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21255 vulnerable 2026-06-03 14:43:44.173368 entities switch IDOR
MEDIUM (5.8)
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch entities with IDOR from a logged in user. This is fixed in version 9.5.4.
Published: 2021-03-02T19:40:20.000Z
Updated: 2024-08-03T18:09:14.994Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.