Lucene search
GitHub_MCVELIST:CVE-2022-31062HistoryJun 20, 2022 - 12:00 a.m.
CVE-2022-31062 Unauthenticated Local File Inclusion
2022-06-2000:00:00
CWE-22
GitHub_M
www.cve.org
7
cve-2022-31062
unauthenticated
local file inclusion
plugin
system files
upgrade
version 1.0.2
workarounds
deploy feature
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.005
Percentile
76.4%
Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds b/deploy/index.php file can be deleted if deploy feature is not used.
CNA Affected
[
{
"vendor": "glpi-project",
"product": "glpi-inventory-plugin",
"versions": [
{
"version": "< 1.0.2",
"status": "affected"
}
]
}
]Related
packetstorm
packetstorm
GLPI Glpiinventory 1.0.1 Local File Inclusion
2023-04-03 00:00:00
prion
prion
Security feature bypass
2022-06-20 22:15:00
osv
osv
CVE-2022-31062
2022-06-20 22:15:07
zdt
zdt
nvd
nvd
CVE-2022-31062
2022-06-20 22:15:07
cve
cve
CVE-2022-31062
2022-06-20 22:15:07
exploitdb
exploitdb
GLPI Glpiinventory v1.0.1 - Unauthenticated Local File Inclusion
2023-04-03 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.005
Percentile
76.4%
Related for CVELIST:CVE-2022-31062