{"id":442994,"date":"2026-10-01T10:08:50","date_gmt":"2026-10-01T08:08:50","guid":{"rendered":"https:\/\/www.glpi-project.org\/?p=442994"},"modified":"2026-10-01T10:08:52","modified_gmt":"2026-10-01T08:08:52","slug":"glpi-11-0-11-has-been-released","status":"publish","type":"post","link":"https:\/\/www.glpi-project.org\/en\/glpi-11-0-11-has-been-released\/","title":{"rendered":"GLPI 11.0.11 has been released!"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Due to an undetected regression, GLPI 11.0.10 crashes when loading some plugins. Version 11.0.11 has been released to address the issue.&nbsp;<strong>We recommend that all users upgrade as soon as possible<\/strong>.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\/\" data-type=\"link\" data-id=\"https:\/\/github.com\/glpi-project\/glpi\/releases\/\" target=\"_blank\" rel=\"noreferrer noopener\">11.0.11 archive<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">As a reminder, here are the details of version 11.0.10, which also apply to 11.0.11:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Many bug fixes have also been made, read the changelogs for more details:\u00a0<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/93?closed=1\" target=\"_blank\" rel=\"noopener\">11.0.10 changelog<\/a><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/95?closed=1\" target=\"_blank\" rel=\"noopener\">11.0.11 changelog<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You will find below the list of security issues fixed in this bugfix version:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>[SECURITY -\u00a0High] Authorization bypass in massive actions<\/li>\n\n\n\n<li>[SECURITY -\u00a0High] Privilege escalation via user cloning<\/li>\n\n\n\n<li>[SECURITY -\u00a0High] Improper rights checks in users deletion<\/li>\n\n\n\n<li>[SECURITY -\u00a0High] SQL Injection through form actors dropdown<\/li>\n\n\n\n<li>[SECURITY -\u00a0High] 2FA deactivation\/modification on users with higher privileges<\/li>\n\n\n\n<li>[SECURITY -\u00a0High] Reflected XSS in the dashboard search result widget<\/li>\n\n\n\n<li>[SECURITY -\u00a0Medium] Users names enumeration via the planning feature<\/li>\n\n\n\n<li>[SECURITY -\u00a0Medium] Missing authorization checks in the planning feature<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We would like to thank all people who contributed to this new version and all those who contribute regularly to the GLPI project!<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.glpi-project.org\/en\/downloads\/\">Download GLPI 11.0.11<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Due to an undetected regression, GLPI 11.0.10 crashes when loading some plugins. Version 11.0.11 has been released to address the issue.&nbsp;We recommend that all users upgrade as soon as possible. As a reminder, here are the details of version 11.0.10, which also apply to 11.0.11: Many bug fixes have also been made, read the changelogs [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":442996,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[155],"tags":[],"class_list":["post-442994","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-versions"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/442994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/comments?post=442994"}],"version-history":[{"count":2,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/442994\/revisions"}],"predecessor-version":[{"id":442997,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/442994\/revisions\/442997"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/media\/442996"}],"wp:attachment":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/media?parent=442994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/categories?post=442994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/tags?post=442994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}