4 matches found
Directory traversal
The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter...
PT-2023-13339 · Glpi · Managentities
Name of the Vulnerable Software and Affected Versions: Managentities plugin versions prior to 4.0.2 for GLPI Description: The issue allows reading local files via directory traversal in the inc/cri.class.php file parameter. Recommendations: For versions prior to 4.0.2, update to version 4.0.2 or...
CVE-2022-34127
The CVE-2022-34127 entry describes a directory traversal/local file inclusion in GLPI’s Manageentities plugin before 4.0.2. The vulnerability arises in inc/cri.class.php, enabling unauthenticated access to local files. Public materials (Exploit-DB) include a PoC demonstrating LFI against the plug...
