Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. This is fixed in version 10.0.19.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 GLPI, Authorization Bypass, #CVE-2025-53357 (MODERATE) https://dailycve.com/glpi-authorization-bypass-cve-2025-53357-moderate/
Post summary
The tweet references the announcement of an authorization bypass vulnerability in GLPI (CVE-2025-53357) and provides a link to an external details page, but it offers no actionable PoC, exploit, or remediation specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | glpi-project | glpi | - | - | - |