CVE-2021-39209

Published: 2021-09-15T16:15Z

Last Modified: 2024-11-21T06:18Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can bypass Cross-Site Request Forgery (CSRF) protection in many places. This could allow a malicious actor to perform many actions on GLPI. This issue is fixed in version 9.5.6. There are no workarounds aside from upgrading. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt