Описание
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. From 11.0.0 to before 11.0.5, an authenticated technician user can upload a malicious file and trigger its execution through an unsafe PHP instantiation. This vulnerability is fixed in 11.0.5.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
8 High
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. From 11.0.0 to before 11.0.5, an authenticated technician user can upload a malicious file and trigger its execution through an unsafe PHP instantiation. This vulnerability is fixed in 11.0.5.
GLPI is an open-source asset and IT management software package that p ...
Уязвимость системы заявок, инцидентов и инвентаризации компьютерного оборудования GLPI, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
EPSS
8 High
CVSS3
8.8 High
CVSS3