VULNERABILITY INTELLIGENCE

CVE-2020-15217

CVSS score5.3 MEDIUM

EPSS probability1.01%

CISA KEVNot currently listed

Published2020-10-07

Last modified2026-06-17

Description

In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to the FAQ.