Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:26:51 +0000 CVE-2023-41322 — Privilege Escalation from technician to super-admin in GLPI https://vulnerability.circl.lu/vuln/cve-2023-41322 <p><strong>Affected:</strong> glpi-project glpi</p> <p>GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A user with write access to another user can make requests to change the latter&#39;s password and then take control of their account. Users are advised to upgrade to version 10.0.10. There are no known work around for this vulnerability.</p> <p><strong>Affected:</strong> glpi-project glpi</p> <p>GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A user with write access to another user can make requests to change the latter&#39;s password and then take control of their account. Users are advised to upgrade to version 10.0.10. There are no known work around for this vulnerability.</p> https://vulnerability.circl.lu/vuln/cve-2023-41322