VULNERABILITY INTELLIGENCE

CVE-2024-27937

CVSS score6.5 MEDIUM

EPSS probability27.14%

CISA KEVNot currently listed

Published2024-03-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can obtain the email address of all GLPI users. This issue has been patched in version 10.0.13.

Weakness classification

security-advisories@github.com: CWE-285
nvd@nist.gov: NVD-CWE-noinfo

Primary references

security-advisories@github.com — Exploit
security-advisories@github.com — Patch
security-advisories@github.com — Release Notes
security-advisories@github.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory