CVE-2022-31143

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. It was found that in affected versions there is an exposure of private information defined in setup of GLPI (like smtp or cas hosts). Note that passwords are not exposed. Users are advised to upgrade to version 10.0.3. There are no known workarounds for this issue.

• CWE-200

• https://github.com/glpi-project/glpi/commit/e66a0dfe697cbd4b3ec22736a8f8fd025a28f978Patch, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-6mmq-x3j2-677jThird Party Advisory
• https://github.com/glpi-project/glpi/commit/e66a0dfe697cbd4b3ec22736a8f8fd025a28f978Patch, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-6mmq-x3j2-677jThird Party Advisory

Published

Sep 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31137Roxy-WI is a web interface for managing Haproxy, Nginx, Apac…9.8
• CVE-2022-31138mailcow is a mailserver suite. Prior to mailcow-dockerized v…8.8
• CVE-2022-31139UnsafeAccessor (UA) is a bridge to access jdk.internal.misc.…7.5
• CVE-2022-3114An issue was discovered in the Linux kernel through 5.16-rc6…5.5
• CVE-2022-31140Valinor is a PHP library that helps to map any input into a …9.1
• CVE-2022-31142@fastify/bearer-auth is a Fastify plugin to require bearer A…7.5
• CVE-2022-31144Redis is an in-memory database that persists on disk. A spec…8.8
• CVE-2022-31145FlyteAdmin is the control plane for Flyte responsible for ma…6.5
• CVE-2022-31146Wasmtime is a standalone runtime for WebAssembly. There is a…8.8
• CVE-2022-31147The jQuery Validation Plugin (jquery-validation) provides dr…7.5
• CVE-2022-31148Shopware is an open source e-commerce software. In versions …5.4
• CVE-2022-31149ActivityWatch open-source automated time tracker. Versions p…9.6