Описание
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 9.1.4 (включая)
cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.01309
Низкий
4.9 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 4.9
ubuntu
больше 9 лет назад
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
CVSS3: 4.9
debian
больше 9 лет назад
front/backup.php in GLPI before 9.1.5 allows remote authenticated admi ...
CVSS3: 4.9
github
больше 4 лет назад
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
CVSS3: 9.8
altlinux
около 9 лет назад
ALT-PU-2017-2291: package `glpi` update to version 9.1.6-alt2
EPSS
Процентиль: 71%
0.01309
Низкий
4.9 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-20