{"id":444016,"date":"2026-11-12T14:30:00","date_gmt":"2026-11-12T12:30:00","guid":{"rendered":"https:\/\/www.glpi-project.org\/?p=444016"},"modified":"2026-11-06T18:02:41","modified_gmt":"2026-11-06T16:02:41","slug":"glpi-12-0-2-and-11-0-13-are-available","status":"publish","type":"post","link":"https:\/\/www.glpi-project.org\/fr\/glpi-12-0-2-and-11-0-13-are-available\/","title":{"rendered":"GLPI 12.0.2 et 11.0.13 sont disponibles"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Two new bugfix versions of GLPI are out: <strong>12.0.2<\/strong> and <strong>11.0.13<\/strong>. They fix several recently discovered security issues, so we strongly recommend updating.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Security fixes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The following vulnerabilities are fixed in both versions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>[SECURITY - High 11.0 &amp; 12.0]<\/strong> Privilege escalation via the legacy API<\/li>\n\n\n\n<li><strong>[SECURITY - High 11.0 &amp; 12.0]<\/strong> OAuth server consent bypass<\/li>\n\n\n\n<li><strong>[SECURITY - High 11.0 &amp; 12.0]<\/strong> Account takeover via an embedded dashboard<\/li>\n\n\n\n<li><strong>[SECURITY - High 11.0 &amp; 12.0]<\/strong> Stored XSS in document downloads via API-written filenames<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Bug fixes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">These releases also include many bug fixes. See the changelogs for details:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/99?closed=1\" target=\"_blank\" rel=\"noopener\">GLPI 12.0.2 changelog<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/98?closed=1\" target=\"_blank\" rel=\"noopener\">GLPI 11.0.13 changelog<\/a><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Download<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Both archives are available on GitHub:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\" target=\"_blank\" rel=\"noopener\">Download GLPI 12.0.2<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\" target=\"_blank\" rel=\"noopener\">Download GLPI 11.0.13<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you to everyone who contributed to these versions, and to all those who contribute regularly to the GLPI project!<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\" target=\"_blank\" rel=\"noopener\">Download<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two new bugfix versions of GLPI are out: 12.0.2 and 11.0.13. They fix several recently discovered security issues, so we strongly recommend updating. Security fixes The following vulnerabilities are fixed in both versions: Bug fixes These releases also include many bug fixes. See the changelogs for details: Download Both archives are available on GitHub: Thank [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":444018,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[155],"tags":[],"class_list":["post-444016","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-versions"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/posts\/444016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/comments?post=444016"}],"version-history":[{"count":1,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/posts\/444016\/revisions"}],"predecessor-version":[{"id":444017,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/posts\/444016\/revisions\/444017"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/media\/444018"}],"wp:attachment":[{"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/media?parent=444016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/categories?post=444016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.glpi-project.org\/fr\/wp-json\/wp\/v2\/tags?post=444016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}