<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: Teclib incident updates</title>
  <link>https://pwn.watch/t/teclib</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Tue, 07 Mar 2023 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/teclib/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[critical] Teclib GLPI: Remote Code Execution (CVE-2022-35914)</title>
    <link>https://pwn.watch/i/teclib-glpi-cve-2022-35914</link>
    <guid isPermaLink="true">https://pwn.watch/i/teclib-glpi-cve-2022-35914</guid>
    <pubDate>Tue, 07 Mar 2023 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed. Added to CISA KEV on 2023-03-07.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; closed · &lt;strong&gt;Patch:&lt;/strong&gt; patched · &lt;strong&gt;Fixed in:&lt;/strong&gt; See vendor advisory linked in sources&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Latest updates:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;2023-03-07: CISA added CVE-2022-35914 to the KEV catalog (due 2023-03-28).&lt;/li&gt;&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;CVEs:&lt;/strong&gt; CVE-2022-35914&lt;/p&gt;</description>
  </item>
</channel>
</rss>
