CVE

CVE-2020-11034

6.1

CVSSmedium

Exploitable remotely over the internet · no authentication required · user interaction needed.

Description

In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6.

Attack Vector

Network

Privileges Req.

None

User Interaction

Required

glpi

Updated Oct 23, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~7 seconds

CVE-2020-11034 Scanner

Detects 'Open Redirect' vulnerability in GLPI affects v. before 9.4.6.

Used 3.2k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: glpi

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →