Update Feed

GLPI 10.0.14

15 March 2024

GLPI version 10.0.14 is now available (security release).

Upgrading to GLPI 10.0.14

GLPI 10.0.14 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply GLPI updates as new versions are released, or use Installatron's Clone feature to duplicate an existing GLPI install to test the 10.0.14 upgrade prior to applying it live. Get started managing your GLPI installations with Installatron

What's New in GLPI 10.0.14

10.0.14

Security

SQL Injection in through the search engine (CVE-2024-27096)
Blind SSRF using Arbitrary Object Instantiation (CVE-2024-27098)
Stored XSS in dashboards (CVE-2024-27104)
Reflected XSS in debug mode (CVE-2024-27914)
Sensitive fields access through dropdowns (CVE-2024-27930)
Users emails enumeration (CVE-2024-27937)

Bug Fixes

Fix assign field when suppliers assign is available
Switching entities issues

10.0.13

Bug Fixes

Error when creating a Ticket with SLA/OLA.
Weekly recurrent reservations creation does not work.
And many more fixes.