CVE-2022-34127

HIGH 7.5CVE-2022-34127 · Published 16/04/2023 · updated 17/06/2026

In short

CVE-2022-34127 is a HIGH (CVSS 7.5) vulnerability affecting manageentities (glpi-project).
Chance of exploitation in the next 30 days (EPSS): 6.8%, higher than 94.0% of all vulnerabilities.
Fix: update to 4.0.2 or later.

Package	Affected versions	Patched versions
manageentities glpi-project	`< 4.0.2`	`4.0.2`

The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.php file parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.