Impact

The lack of path filtering on the GLPI URL may allow an attacker to transmit a malicious URL of login page that can be used to attempt a phishing attack on user credentials.

Patches

Upgrade to 10.0.10

For more information

If you have any questions or comments about this advisory, mail us at glpi-security@ow2.org.