CVE-2026-32312

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-32312
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32312.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-32312
Aliases
  • GHSA-cg63-qchq-q626
Downstream
Published
2026-05-18T23:46:26.200Z
Modified
2026-07-08T08:12:26.303332475Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
GLPI: Unauthorized export of form structure
Details

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue has been fixed in version 11.0.7.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32312.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-862"
    ]
}
References

Affected packages

Git / github.com/glpi-project/glpi

Affected ranges

Type
GIT
Repo
https://github.com/glpi-project/glpi
Events
Introduced
b5cb4adb3c350521d85209d49e29e8619cdf8316
Fixed
0ea900cb51a37f313c733b2024bf62f6a295c271
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "11.0.7"
        }
    ]
}

Affected versions

11.*
11.0.0
11.0.1
11.0.2
11.0.3
11.0.4
11.0.5
11.0.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32312.json"