CVE-2022-34127

The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter...

Directory traversal

The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter...

PT-2023-13339 · Glpi · Managentities

Name of the Vulnerable Software and Affected Versions: Managentities plugin versions prior to 4.0.2 for GLPI Description: The issue allows reading local files via directory traversal in the inc/cri.class.php file parameter. Recommendations: For versions prior to 4.0.2, update to version 4.0.2 or...

CVE-2022-34127

The CVE-2022-34127 entry describes a directory traversal/local file inclusion in GLPI’s Manageentities plugin before 4.0.2. The vulnerability arises in inc/cri.class.php, enabling unauthenticated access to local files. Public materials (Exploit-DB) include a PoC demonstrating LFI against the plug...