CVE-2024-11955

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-11955
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11955.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-11955
Aliases
  • GHSA-g5fm-jq4j-c2c7
Downstream
Published
2025-02-25T15:07:56Z
Modified
2026-08-12T03:51:21Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
GLPI index.php redirect
Details

A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument redirect leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 10.0.18 is able to address this issue. It is recommended to upgrade the affected component.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-601"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/11xxx/CVE-2024-11955.json"
}
References

Affected packages

Git / github.com/glpi-project/glpi

Affected ranges

Type
GIT
Repo
https://github.com/glpi-project/glpi
Events
Introduced
815997021a5df4feb7077a12f6f52769e9bd3459
Fixed
9389461d8a207bdcdf4f50f9db9fc8acdf6c7bbf
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "last_affected": "10.0.0"
        },
        {
            "introduced": "10.0.1"
        },
        {
            "last_affected": "10.0.1"
        },
        {
            "introduced": "10.0.2"
        },
        {
            "last_affected": "10.0.2"
        },
        {
            "introduced": "10.0.3"
        },
        {
            "last_affected": "10.0.3"
        },
        {
            "introduced": "10.0.4"
        },
        {
            "last_affected": "10.0.4"
        },
        {
            "introduced": "10.0.5"
        },
        {
            "last_affected": "10.0.5"
        },
        {
            "introduced": "10.0.6"
        },
        {
            "last_affected": "10.0.6"
        },
        {
            "introduced": "10.0.7"
        },
        {
            "last_affected": "10.0.7"
        },
        {
            "introduced": "10.0.8"
        },
        {
            "last_affected": "10.0.8"
        },
        {
            "introduced": "10.0.9"
        },
        {
            "last_affected": "10.0.9"
        },
        {
            "introduced": "10.0.10"
        },
        {
            "last_affected": "10.0.10"
        },
        {
            "introduced": "10.0.11"
        },
        {
            "last_affected": "10.0.11"
        },
        {
            "introduced": "10.0.12"
        },
        {
            "last_affected": "10.0.12"
        },
        {
            "introduced": "10.0.13"
        },
        {
            "last_affected": "10.0.13"
        },
        {
            "introduced": "10.0.14"
        },
        {
            "last_affected": "10.0.14"
        },
        {
            "introduced": "10.0.15"
        },
        {
            "last_affected": "10.0.15"
        },
        {
            "introduced": "10.0.16"
        },
        {
            "last_affected": "10.0.16"
        },
        {
            "introduced": "10.0.17"
        },
        {
            "last_affected": "10.0.17"
        },
        {
            "introduced": "0.85"
        },
        {
            "fixed": "10.0.18"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

10.*
10.0.0
10.0.1
10.0.10
10.0.11
10.0.12
10.0.13
10.0.14
10.0.15
10.0.16
10.0.17
10.0.2
10.0.3
10.0.4
10.0.5
10.0.6
10.0.7
10.0.8
10.0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11955.json"