CVE-2023-35940

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file allows an unauthenticated user to be able to access dashboards data. Version 10.0.8 contains a patch for this issue.

• CWE-284
• CWE-287
• CWE-862

• https://github.com/glpi-project/glpi/releases/tag/10.0.8Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-qrh8-rg45-45fwVendor Advisory
• https://github.com/glpi-project/glpi/releases/tag/10.0.8Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-qrh8-rg45-45fwVendor Advisory

Published

Jul 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35934yt-dlp is a command-line program to download videos from vid…8.2
• CVE-2023-35935Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2023-35936Pandoc is a Haskell library for converting from one markup f…5
• CVE-2023-35937Metersphere is an open source continuous testing platform. I…8.8
• CVE-2023-35938 Tuleap is a Free & Open Source Suite to improve management …7.2
• CVE-2023-35939GLPI is a free asset and IT management software package. Sta…8.1
• CVE-2023-35941Envoy is an open source edge and service proxy designed for …9.8
• CVE-2023-35942Envoy is an open source edge and service proxy designed for …6.5
• CVE-2023-35943Envoy is an open source edge and service proxy designed for …7.5
• CVE-2023-35944Envoy is an open source edge and service proxy designed for …5.3
• CVE-2023-35945Envoy is a cloud-native high-performance edge/middle/service…7.5
• CVE-2023-35946Gradle is a build tool with a focus on build automation and …5.5