Records238All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical35CVSS 9.0–10.0
CVSS high89CVSS 7.0–8.9
Exploited now
glpi-project records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0677 · Published 2023-04-16 · No fix listed CWE-22
