PoC Index

CVE-2022-34125

MEDIUM 6.5EPSS 4.6%

front/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive information via a _log/ pathname in the file parameter.

CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
4.61% chance of exploitation in the next 30 days, 91th percentile
Published
2023-04-16
Updated
2025-02-06

ExploitDB entries (1)

References

Related