https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T10:42:01.706571+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2021-39210 CVE-2021-39210 — Autologin cookie accessible by scripts 2026-10-01T10:42:01.708028+00:00

Affected: glpi-project glpi

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, the cookie used to store the autologin cookie (when a user uses the "remember me" feature) is accessible by scripts. A malicious plugin that could steal this cookie would be able to use it to autologin. This issue is fixed in version 9.5.6. As a workaround, one may avoid using the "remember me" feature.