All CVE records

CVE-2022-35914 — Teclib GLPI Remote Code Execution Vulnerability

CISA KEV listed Added March 7, 2023 Remediate by March 28, 2023

Description

Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed.

Required action

Apply updates per vendor instructions.

Notes

https://glpi-project.org/fr/glpi-10-0-3-disponible/, http://www.bioinformatics.org/phplabware/sourceer/sourceer.php?&Sfs=htmLawedTest.php&Sl=.%2Finternal_utilities%2FhtmLawed.; https://nvd.nist.gov/vuln/detail/CVE-2022-35914

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer