CVE-2013-2225
GLPI 0.83.9 - 'Unserialize()' Remote Code Execution
Severity Score
9.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
4
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.
inc/ticket.class.php en GLPI 0.83.9 y anteriores permite a atacantes remotos deserializar objetos PHP arbitrarios a través del parámetro _predefined_fields hacia front/ticket.form.php.
Multiple security vulnerabilities exist due to improper sanitation of user input in GLPI versions prior to 0.83.9, 0.83.91, and 0.84.2. This update provides GLPI version 0.83.91, with a patch from GLPI 0.84.2, to fix these issues.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-02-19 CVE Reserved
- 2013-07-01 CVE Published
- 2013-07-01 First Exploit
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/94683 | Vdb Entry | |
| http://seclists.org/oss-sec/2013/q2/626 | Mailing List |
|
| http://seclists.org/oss-sec/2013/q2/645 | Mailing List |
|
| http://www.securityfocus.com/bid/60823 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/122242 | 2013-07-01 | |
| https://www.exploit-db.com/exploits/26530 | 2013-07-01 | |
| http://www.exploit-db.com/exploits/26530 | 2024-08-06 | |
| https://forge.indepnet.net/projects/glpi/repository/revisions/21169/diff | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | <= 0.83.9 Search vendor "Glpi-project" for product "Glpi" and version " <= 0.83.9" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.20 Search vendor "Glpi-project" for product "Glpi" and version "0.20" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.21 Search vendor "Glpi-project" for product "Glpi" and version "0.21" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.30 Search vendor "Glpi-project" for product "Glpi" and version "0.30" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.31 Search vendor "Glpi-project" for product "Glpi" and version "0.31" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.40 Search vendor "Glpi-project" for product "Glpi" and version "0.40" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.41 Search vendor "Glpi-project" for product "Glpi" and version "0.41" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.42 Search vendor "Glpi-project" for product "Glpi" and version "0.42" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.51 Search vendor "Glpi-project" for product "Glpi" and version "0.51" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.51a Search vendor "Glpi-project" for product "Glpi" and version "0.51a" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68.1 Search vendor "Glpi-project" for product "Glpi" and version "0.68.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68.2 Search vendor "Glpi-project" for product "Glpi" and version "0.68.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68.3 Search vendor "Glpi-project" for product "Glpi" and version "0.68.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70.1 Search vendor "Glpi-project" for product "Glpi" and version "0.70.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70.2 Search vendor "Glpi-project" for product "Glpi" and version "0.70.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71 Search vendor "Glpi-project" for product "Glpi" and version "0.71" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.2 Search vendor "Glpi-project" for product "Glpi" and version "0.71.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.3 Search vendor "Glpi-project" for product "Glpi" and version "0.71.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.4 Search vendor "Glpi-project" for product "Glpi" and version "0.71.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.5 Search vendor "Glpi-project" for product "Glpi" and version "0.71.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.6 Search vendor "Glpi-project" for product "Glpi" and version "0.71.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.1 Search vendor "Glpi-project" for product "Glpi" and version "0.72.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.2 Search vendor "Glpi-project" for product "Glpi" and version "0.72.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.3 Search vendor "Glpi-project" for product "Glpi" and version "0.72.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.4 Search vendor "Glpi-project" for product "Glpi" and version "0.72.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78 Search vendor "Glpi-project" for product "Glpi" and version "0.78" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.1 Search vendor "Glpi-project" for product "Glpi" and version "0.78.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.2 Search vendor "Glpi-project" for product "Glpi" and version "0.78.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.3 Search vendor "Glpi-project" for product "Glpi" and version "0.78.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.4 Search vendor "Glpi-project" for product "Glpi" and version "0.78.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.5 Search vendor "Glpi-project" for product "Glpi" and version "0.78.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80 Search vendor "Glpi-project" for product "Glpi" and version "0.80" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.1 Search vendor "Glpi-project" for product "Glpi" and version "0.80.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.2 Search vendor "Glpi-project" for product "Glpi" and version "0.80.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.3 Search vendor "Glpi-project" for product "Glpi" and version "0.80.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.4 Search vendor "Glpi-project" for product "Glpi" and version "0.80.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.5 Search vendor "Glpi-project" for product "Glpi" and version "0.80.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.6 Search vendor "Glpi-project" for product "Glpi" and version "0.80.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.7 Search vendor "Glpi-project" for product "Glpi" and version "0.80.7" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.61 Search vendor "Glpi-project" for product "Glpi" and version "0.80.61" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83 Search vendor "Glpi-project" for product "Glpi" and version "0.83" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.1 Search vendor "Glpi-project" for product "Glpi" and version "0.83.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.2 Search vendor "Glpi-project" for product "Glpi" and version "0.83.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.3 Search vendor "Glpi-project" for product "Glpi" and version "0.83.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.4 Search vendor "Glpi-project" for product "Glpi" and version "0.83.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.5 Search vendor "Glpi-project" for product "Glpi" and version "0.83.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.6 Search vendor "Glpi-project" for product "Glpi" and version "0.83.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.7 Search vendor "Glpi-project" for product "Glpi" and version "0.83.7" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.8 Search vendor "Glpi-project" for product "Glpi" and version "0.83.8" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.31 Search vendor "Glpi-project" for product "Glpi" and version "0.83.31" | - |
Affected
| ||||||