Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799 /CVE-2025-24801)

https://blog.lexfo.fr/glpi-sql-to-rce.html

GLPI: "The most complete open source service management software"

@buherator It's so complete that it comes with the usual trivial to find vulnerabilities you would expect from enterprise software!

@swapgs @buherator lol