12.0.1 and 11.0.12 releases fix several security issues that have been recently discovered. Update is stronglyrecommended!
Many bug fixes have also been made, read the changelogs for more details:
You can download the new archives on GitHub: https://github.com/glpi-project/glpi/releases
You will find below the list of security issues fixed in theses bugfixes versions:
- [SECURITY - Critical 11.0 & 12.0] External authentication bypass
- [SECURITY - High 11.0 & 12.0] Ticket category reflected XSS
- [SECURITY - High 11.0 & 12.0] Reflected XSS in users authorization list
- [SECURITY - High 11.0 & 12.0] Privilege escalation by entity administrator
- [SECURITY - High 11.0 & 12.0] Stored XSS on VLAN
- [SECURITY - High 11.0 & 12.0] Reflected XSS in form header
We would like to thank all people who contributed to this new version and all those who contribute regularly to the GLPI project!
