Skip to content

10.0.28

Choose a tag to compare

View all tags
@trasher trasher released this 30 Sep 09:24
10.0.28
063d6f9

This is a security release, upgrading is recommended

Warning

Important note: with the upcoming release of GLPI 12.0.0, version 10.0.28 will be the final release of the 10.0 branch, which will no longer receive bugfixes.

Download it

This release fixes a few security issues that have been recently discovered. Update is recommended!

You will find below the list of security issues fixed in this bugfixes version:

  • [SECURITY - High] Authorization bypass in massive actions
  • [SECURITY - High] Privilege escalation via user cloning
  • [SECURITY - High] Improper rights checks in users deletion
  • [SECURITY - High] SQL Injection through form actors dropdown
  • [SECURITY - Medium] Users names enumaration via the planning feature
  • [SECURITY - Medium] Missing authorization checks in the planning feature

Many bug fixes have also been made, read the full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Assets 3
Loading