/// ALL POSTS

GLPI is an open-source IT asset management software used by thousands of organizations worldwide. I identified a vulnerability chain that allows an authenticated administrator to achieve Remote Code Execution (RCE) via PHP Object Injection in the progress indicator storage mechanism.