Glpi · Glpi · CVE-2023-35939
**Name of the Vulnerable Software and Affected Versions**
GLPI versions 9.5.0 through 10.0.7
**Description**
The issue is related to inadequate access control in the GLPI system, which can be exploited by a remote attacker to modify or view dashboard data. This is due to an incorrect rights check on a file accessible by an authenticated user, or in some cases, without authentication.
**Recommendations**
For GLPI versions 9.5.0 through 10.0.7, update to version 10.0.8 to resolve the issue. As a temporary workaround, consider restricting access to the affected file to minimize the risk of exploitation.