exploitDog

CVE-2022-34126

Опубликовано: 16 апр. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter.

Ссылки

https://github.com/InfotelGLPI/activity/releases/tag/3.1.1
Third Party Advisory
https://github.com/InfotelGLPI/activity/security/advisories/GHSA-jcmw-hpgh-357p
Third Party Advisory
https://pentest.blog/advisory-glpi-service-management-software-sql-injection-remote-code-execution-and-local-file-inclusion/
Third Party Advisory
https://github.com/InfotelGLPI/activity/releases/tag/3.1.1
Third Party Advisory
https://github.com/InfotelGLPI/activity/security/advisories/GHSA-jcmw-hpgh-357p
Third Party Advisory
https://pentest.blog/advisory-glpi-service-management-software-sql-injection-remote-code-execution-and-local-file-inclusion/
Third Party Advisory
https://pentest.blog/advisory-glpi-service-management-software-sql-injection-remote-code-execution-and-local-file-inclusion/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glpi-project:activity:*:*:*:*:*:glpi:*:*

Версия до 3.1.1 (исключая)

EPSS

Процентиль: 48%

0.00254

Низкий

7.5 High

CVSS3

Дефекты

CWE-22

CWE-22

Связанные уязвимости

GHSA-ph76-mjfr-pcmr

CVSS3: 7.5

github

почти 3 года назад

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter.

EPSS

Процентиль: 48%

0.00254

Низкий

7.5 High

CVSS3

Дефекты

CWE-22

CWE-22