Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/05 12:8 a.m.10 views

CVE-2025-54780 glpi-screenshot-plugin exposes local files in /ajax/screenshot.php

The glpi-screenshot-plugin allows users to take screenshots or screens recording directly from GLPI. In versions below 2.0.2, authenticated user can use the /ajax/screenshot.php endpoint to leak files from the system or use PHP wrappers. This is fixed in version 2.0.2...

7.7CVSS6.7AI score
SaveExploits0References4
Rows per page
Query Builder