CVEvulnerability

CVE-2025-32786

7.5 HIGH Published 2025-11-04 Modified 2026-10-18 Official page ↗

Status: Deferred
Published: 2025-11-04
Last modified: 2026-10-18
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-89

Description

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References

https://github.com/glpi-project/glpi-inventory-plugin/blob/1.5.1/CHANGELOG.md github.com
https://github.com/glpi-project/glpi-inventory-plugin/releases/tag/1.5.1 github.com
https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-w2cp-r675-6xpq github.com

CVE-2025-32786

Description

Related

Weakness · CWE (1)

References