CVE-2017-11183

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:07

Type Values Removed Values Added
References () https://github.com/glpi-project/glpi/issues/2450 - Third Party Advisory () https://github.com/glpi-project/glpi/issues/2450 - Third Party Advisory
References () https://github.com/glpi-project/glpi/releases/tag/9.1.5 - Third Party Advisory () https://github.com/glpi-project/glpi/releases/tag/9.1.5 - Third Party Advisory

Information

Published : 2017-07-28 05:29

Updated : 2024-11-21 03:07


NVD link : CVE-2017-11183

Mitre link : CVE-2017-11183

CVE.ORG link : CVE-2017-11183


JSON object : View

Products Affected

glpi-project

  • glpi
CWE
CWE-20

Improper Input Validation