Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 27/09/2023 Updated: 29/09/2023

CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9

VMScore: 0

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The document upload process can be diverted to delete some files. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
glpi-project glpi

GLPI PoC - Security advisory

GLPI-PoC GLPI PoC - Security advisory This repository is used to host our exploitation scripts for the vulnerabilities that have been disclosed to Teclib for the GLPI project The vulnerabilities were patched in 10010 version of GLPI CVE CVE-2023-42461 - SQL injection in ITIL actors CVE-2023-42462 - File deletion through document upload process CVE-2023-42802 - Unallowed PH

CWE-434 https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75 https://nvd.nist.gov https://github.com/NH-RED-TEAM/GLPI-PoC

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-42462

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect