Records238All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical35CVSS 9.0–10.0
CVSS high89CVSS 7.0–8.9
Exploited now
glpi-project records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01172 · Published 2023-04-16 · No fix listed CWE-22
