CVE-2019-14666

GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes.

• CWE-200

• https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5qThird Party Advisory
• https://www.tarlogic.com/advisories/Tarlogic-2019-GPLI-Account-Takeover.txtExploit, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5qThird Party Advisory
• https://www.tarlogic.com/advisories/Tarlogic-2019-GPLI-Account-Takeover.txtExploit, Third Party Advisory

Published

Sep 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14659Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1466An information disclosure vulnerability exists when the Wind…6.5
• CVE-2019-14662Brandy 1.20.1 has a stack-based buffer overflow in fileio_op…
• CVE-2019-14663Brandy 1.20.1 has a stack-based buffer overflow in fileio_op…
• CVE-2019-14664In Enigmail below 2.1, an attacker in possession of PGP encr…6.5
• CVE-2019-14665Brandy 1.20.1 has a heap-based buffer overflow in define_arr…
• CVE-2019-14667Firefly III 4.7.17.4 is vulnerable to multiple stored XSS is…
• CVE-2019-14668Firefly III 4.7.17.3 is vulnerable to stored XSS due to the …
• CVE-2019-14669Firefly III 4.7.17.3 is vulnerable to stored XSS due to the …
• CVE-2019-1467An information disclosure vulnerability exists when the Wind…6.5
• CVE-2019-14670Firefly III 4.7.17.3 is vulnerable to stored XSS due to the …
• CVE-2019-14671Firefly III 4.7.17.3 is vulnerable to local file enumeration…