GLPI - RCE
WAF rulehttp:exploitcve.CVE-2022-35914MITRE T1595MITRE T1190cwe.CWE-74
- Version
- 0.6
- Name
- crowdsecurity/vpatch-CVE-2022-35914
GLPI RCE (CVE-2022-35914)
Install with a top-level collection
1 collection include itsudo cscli collections install ZoeyVid/npmplusInstalls 5 parsers and 54 scenarios, via WAF - Virtual Patching.
View NPMplus →Installation
sudo cscli appsec-rules install crowdsecurity/vpatch-CVE-2022-35914Then reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
name: crowdsecurity/vpatch-CVE-2022-35914description: "GLPI RCE (CVE-2022-35914)"rules:- and:- zones:- URItransform:- lowercasematch:type: endsWithvalue: /vendor/htmlawed/htmlawed/htmlawedtest.phplabels:type: exploitservice: httpconfidence: 3spoofable: 0behavior: "http:exploit"label: "GLPI - RCE"classification:- cve.CVE-2022-35914- attack.T1595- attack.T1190- cwe.CWE-74
Installed on
Know where it runs
Sign in to see the Security Engines that run this waf rule, the version they run and whether it was modified locally.