https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:21:49.367159+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-11035 CVE-2020-11035 — weak CSRF tokens in GLPI 2026-10-09T10:21:49.369189+00:00

Affected: glpi-project GLPI

In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6.