Vulnerability in Glpi-Project Glpi

CVE-2013-2225

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.

EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.

Affected products

Glpi-project Glpi — versions 0.5, 0.6, 0.20
N/a — versions n/a

References

secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)
secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (Exploit, exploit, x_refsource_EXPLOIT-DB)