← back
CVE-2022-34127highCWE-22

CVE-2022-34127

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.5epss 6.8%
from disclosure to weapon0 days
Published on NVDApr 16
1st PoCApr 3
exploitation probability
6.8%top 7% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.