CVE-2015-7684

Summary

Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/.

Impact & exploitability

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.glpi-project.org/spip.php?page=annonce&id_breve=338Advisory
• http://seclists.org/fulldisclosure/2015/Feb/71
• https://forge.glpi-project.org/issues/5217