CVE-2024-31705

Description

An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input.

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29578
• https://github.com/V3locidad/GLPI_POC_Plugins_Shell
• https://seclists.org/fulldisclosure/2024/Apr/23