CVE-2019-10233: GLPI-Project GLPI

High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.

Affected products

• GLPI-Project GLPI: before 9.4.1.1 (fixed in 9.4.1.1)

Published 2019-03-27. Last modified 2026-06-17.