CVE-2024-45608: GLPI-Project GLPI

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17.

Affected products

• GLPI-Project GLPI: from 9.5.0, before 10.0.17 (fixed in 10.0.17)

Published 2024-11-15. Last modified 2026-06-17.