CVE-2017-11183: GLPI-Project GLPI

Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days.

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.

Affected products

• GLPI-Project GLPI: up to and including 9.1.4

Published 2017-07-28. Last modified 2026-06-17.