CVEDB API

The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.051

EPSS Ranking 89.3%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2022-34127

Glpi-Project » Manageentities » Version: 2.2.0

cpe:2.3:a:glpi-project:manageentities:2.2.0
Glpi-Project » Manageentities » Version: 3.0.0

cpe:2.3:a:glpi-project:manageentities:3.0.0
Glpi-Project » Manageentities » Version: 3.0.1

cpe:2.3:a:glpi-project:manageentities:3.0.1
Glpi-Project » Manageentities » Version: 3.1.0

cpe:2.3:a:glpi-project:manageentities:3.1.0
Glpi-Project » Manageentities » Version: 3.2.0

cpe:2.3:a:glpi-project:manageentities:3.2.0
Glpi-Project » Manageentities » Version: 3.2.1

cpe:2.3:a:glpi-project:manageentities:3.2.1
Glpi-Project » Manageentities » Version: 3.2.2

cpe:2.3:a:glpi-project:manageentities:3.2.2
Glpi-Project » Manageentities » Version: 4.0.0

cpe:2.3:a:glpi-project:manageentities:4.0.0
Glpi-Project » Manageentities » Version: 4.0.1

cpe:2.3:a:glpi-project:manageentities:4.0.1