CVE-2024-37147: GLPI-Project GLPI

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to 10.0.16.

Affected products

• GLPI-Project GLPI: from 0.85, before 10.0.16 (fixed in 10.0.16)

Published 2024-07-10. Last modified 2026-06-17.