BSD Ports

glpi-project -- GLPI multiple vulnerabilities

· CVE-2024-11955, CVE-2025-23024, CVE-2025-23046, CVE-2025-25192, CVE-2025-21626, CVE-2025-21627, CVE-2025-21619, CVE-2025-24799, CVE-2025-24801 · VuXML entry

[email protected] reports: CVE-2024-11955: A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument redirect leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 10.0.18 …

Affected versions

By system

0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

SystemPortVersionStateFixed
DragonFlywww/glpi10.0.18,1 fixed
FreeBSDwww/glpi11.0.1_1,1 fixed