Teclib GLPI Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/03/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| glpi | ≤ 10.0.2 |
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free