PT-2023-6848 · Glpi+2 · Glpi+2

Cedric-Anne · Published 2023-09-26 · Updated 2024-05-22 · CVE-2023-42462

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.10

Description The issue is related to an unlimited file upload vulnerability in the GLPI system, which can be exploited by a remote attacker to upload arbitrary files to the system. This can potentially allow the deletion of some files by diverting the document upload process. The GLPI system is a free asset and IT management software package that provides ITIL Service Desk features, licenses tracking, and software auditing.

Recommendations For versions prior to 10.0.10, upgrade to version 10.0.10 to resolve the issue. As a temporary workaround, consider restricting access to the file upload functionality until the upgrade is applied. Avoid using the file upload feature in the affected system until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Path traversal

Weakness Enumeration

CWE-434

CWE-22

Related Identifiers

ALT-PU-2023-6186

ALT-PU-2023-7633

ALT-PU-2024-8030

BDU:2023-07851

CVE-2023-42462

GHSA-HM76-JH96-7J75

Affected Products

Alt Linux

Glpi

Red Os

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glpi_htmlawed_php_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/42xxx/CVE-2023-42462.json · Exploit
• 🔥 https://github.com/cactuschibre/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/cosad3s/CVE-2022-35914-poc · Exploit
• 🔥 https://github.com/Wangyanan131/CVE-2022-31061 · Exploit
• 🔥 https://github.com/Vu0r1-sec/CVE-2022-31061 · Exploit
• https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42462 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42462 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-42462 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-42462 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-42462 · Security Note
• https://bdu.fstec.ru/vul/2023-07851 · Security Note
• https://twitter.com/CVEnew/status/1706851417347010727 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1707088086365086208 · Twitter Post