Rootjog
·
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-54780
7.7
High
| Base vector | Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
glpi-screenshot-plugin versions prior to 2.0.2
Description:
The glpi-screenshot-plugin allows users to take screenshots or screen recordings directly from GLPI. Authenticated users can use the `/ajax/screenshot.php` endpoint to leak files from the system or use PHP wrappers in versions prior to 2.0.2.
Recommendations:
Update to glpi-screenshot-plugin version 2.0.2 or later.
Fix