.. / CVE-2021-39211

• Info Disclosure
• Nuclei
• Web

Exploit for GLPI 9.2/<9.5.6 - Information Disclosure (CVE-2021-39211)

Description:

GLPI 9.2 and prior to 9.5.6 is susceptible to information disclosure via the telemetry endpoint, which discloses GLPI and server information. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2021-39211.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-39211.yaml

References: