CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS
Percentile
77.4%
Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated
users to execute arbitrary code by adding a file with an executable
extension as an attachment to a new ticket, then accessing it via a direct
request to the file in files/_tmp/.