{"id":"CVE-2018-7562","aliases":["EUVD-2018-19287","GHSA-m6v3-mvq4-j684","UBUNTU-CVE-2018-7562"],"status":"published","title":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition...","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01723,"percentile":0.77631,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362","CWE-434"],"published":"2018-03-12T21:00:00Z","modified":"2026-10-20T10:50:30Z","affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"glpi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.84.8+dfsg.1-1","0.84.8+dfsg.1-1ubuntu1"]}],"products":[{"vendor":"glpi-project","product":"glpi"}],"references":[{"url":"https://github.com/glpi-project/glpi/pull/3650","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/","tags":["x_refsource_MISC","x_transferred","Permissions Required","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7562"},{"url":"https://github.com/advisories/GHSA-m6v3-mvq4-j684"},{"url":"https://ubuntu.com/security/CVE-2018-7562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7562","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-7562","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","status":"published","published":"2018-03-12T21:00:00Z","modified":"2024-08-05T06:31:04.422Z","updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2018-19287","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","status":"published","published":"2018-03-12T21:00:00Z","modified":"2024-08-05T06:31:04Z","updated_at":"2026-11-03T02:40:05.625439Z"}],"ghsa":[{"id":"GHSA-m6v3-mvq4-j684","title":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition...","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","status":"published","published":"2022-05-14T03:32:28Z","modified":"2023-02-02T05:08:03Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:52:39.182178Z"}],"nvd":[{"id":"CVE-2018-7562","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","status":"published","published":"2018-03-12T21:29:01.14Z","modified":"2026-06-17T02:03:22.583Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-362","CWE-434"],"updated_at":"2026-11-02T14:04:24.264003Z"}],"osv":[{"id":"CVE-2018-7562","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","status":"published","published":"2018-03-12T21:29:01.14Z","modified":"2026-10-20T10:50:30.123693083Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"UBUNTU-CVE-2018-7562","description":"A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.","status":"published","published":"2018-03-12T21:29:00Z","modified":"2025-10-24T04:46:56Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.772093Z"}]}}