CVE-2022-34128 : The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code

The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data to front/upload.php.

Published 2023-04-16 03:15:07

Updated 2023-04-25 18:21:04

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2022-34128

Glpi-project » Positions » For Glpi
Versions before (<) 6.0.1
cpe:2.3:a:glpi-project:positions:*:*:*:*:*:glpi:*:*
Matching versions

EPSS FAQ

5.60%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

https://github.com/InfotelGLPI/positions/releases/tag/6.0.1

Release GLPI ~10.0 : Version 6.0.1 disponible / available · InfotelGLPI/positions · GitHub
Third Party Advisory
https://pentest.blog/advisory-glpi-service-management-software-sql-injection-remote-code-execution-and-local-file-inclusion/

Advisory | GLPI Service Management Software Multiple Vulnerabilities and Remote Code Execution – Pentest Blog
Third Party Advisory

CVEs referencing this url
https://github.com/InfotelGLPI/positions/security/advisories/GHSA-947x-g9g9-rcmx

Unauthenticated Remote Code Execution Due to Unrestricted File Upload · Advisory · InfotelGLPI/positions · GitHub
Third Party Advisory

Jump to