CVE-2025-54780
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-54780
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54780.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-54780
- Aliases
-
- GHSA-x6mp-jhxw-9xrp
- Published
- 2025-08-05T01:15:41Z
- Modified
- 2025-08-05T20:59:45.506558Z
- Summary
- [none]
- Details
-
The glpi-screenshot-plugin allows users to take screenshots or screens recording directly from GLPI. In versions below 2.0.2, authenticated user can use the /ajax/screenshot.php endpoint to leak files from the system or use PHP wrappers. This is fixed in version 2.0.2.
- References