Glpi · Glpi · CVE-2025-25192
**Name of the Vulnerable Software and Affected Versions**
GLPI versions prior to 10.0.18
**Description**
A low-privileged user can enable debug mode and access sensitive information. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited. The issue can be exploited by accessing the `install/update.php` file.
**Recommendations**
For versions prior to 10.0.18, update to version 10.0.18 to resolve the issue.
As a temporary workaround, consider deleting the `install/update.php` file until the patch is applied.