PT-2025-31389 · Glpi+2 · Glpi+2

Geraldino2 · Published 2025-07-29 · Updated 2025-10-07 · CVE-2025-53113

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GLPI versions 0.65 through 10.0.18

Description GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use the external links feature to access information on items they are not authorized to view.

Recommendations Update to version 10.0.19 or later.

Exploit

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

ALT-PU-2025-10163

ALT-PU-2025-9984

BDU:2025-12947

CVE-2025-53113

GHSA-R2MM-6499-4M8J

Affected Products

Alt Linux

Glpi

Red Os

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53113.json · Exploit
• https://github.com/glpi-project/glpi/security/advisories/GHSA-r2mm-6499-4m8j · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53113 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-53113 · Security Note
• https://bdu.fstec.ru/vul/2025-12947 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-53113 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53113 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53113 · Security Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-glpi-07102025 · Note
• https://t.me/CVEtracker/28750 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-glpi-07102025/?sphrase_id=1319546 · Note
• https://twitter.com/CVEnew/status/1950569224155353402 · Twitter Post