CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-09-19
GLPI and htmLawed Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2022-35914)
[Affected Scope] GLPI versions up to and including 10.0.2, specifically within the bundled htmLawed module
[Impact] Unauthenticated remote attackers can inject and execute arbitrary PHP code, leading to full system compromise
[Mitigation] Immediately upgrade GLPI to version 10.0.3 or higher, or delete the vulnerable test script (htmLawedTest.php)