CVE-2013-2225

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to…

published May 27, 2014

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07563 · 94.5th percentile
Published
2014-05-27T15:00Z
EPSS history
Timeline
  • 27 MAY 15:00Z
    inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to…
    cvelistv5