Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-42462

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The document upload process can be diverted to delete some files. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.

Published

2023-09-27T15:19:32.717

Last Modified

2024-11-21T08:22:35.967

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.7 (HIGH)

Weaknesses

Type: Secondary
CWE-22
Type: Primary
CWE-434

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	glpi-project	glpi	< 10.0.10	Yes

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75 Vendor Advisory ([email protected])
https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)