CVE-2023-42462

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.10

Description The issue is related to an unlimited file upload vulnerability in the GLPI system, which can be exploited by a remote attacker to upload arbitrary files to the system. This can potentially allow the deletion of some files by diverting the document upload process. The GLPI system is a free asset and IT management software package that provides ITIL Service Desk features, licenses tracking, and software auditing.

Recommendations For versions prior to 10.0.10, upgrade to version 10.0.10 to resolve the issue. As a temporary workaround, consider restricting access to the file upload functionality until the upgrade is applied. Avoid using the file upload feature in the affected system until the issue is resolved.