Security Advisory
CVE-2022-34126
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter.