vendor:
GLPI
by:
Brian Peters & n3rada
6.1
CVSS
HIGH
RCE
78
CWE
Product Name: GLPI
Affected Version From: 0.8.5
Affected Version To: 9.4.5
Patch Exists: YES
Related CWE: 2020-11060
CPE: a:glpi-project:glpi:0.8.5-9.4.5
Platforms Tested: Kali 2021, Windows 2019
2021
GLPI GZIP(Py3) 9.4.5 – RCE
This exploit allows remote code execution in GLPI GZIP(Py3) version 9.4.5.
Mitigation:
Upgrade to a patched version of GLPI GZIP(Py3) or apply the vendor-supplied patch.
