CVE-2015-7684

2015-10-0514:00:00

mitre

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

77.4%

JSON

Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/.