CVE-2022-31068

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated. This issue has been addressed in version 10.0.2 and all affected users are advised to upgrade.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Jun 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-310697.5NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control CVE-2022-31075.5An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the CVE-2022-310707.5NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block se CVE-2022-310713.3Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Spec CVE-2022-310723.3Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files.CVE-2022-310737.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310746.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310756.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310765.7KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In CVE-2022-310775.7KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In CVE-2022-310786.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310796.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi