Launchpad.net

CVE 2020-11034

In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6.

See the CVE page on Mitre.org for more details.