GLPI Webhook Feature SSRF Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in GLPI versions 11.0.0 prior to 11.0.5. This issue allows GLPI administrators to send unauthorized requests to internal or external resources through the Webhook feature.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests on its behalf. This could potentially be used to access internal services or resources that are not normally exposed to the public.

Remediation

Users are advised to upgrade to GLPI version 11.0.5, where this vulnerability has been patched.