CVE-2021-43779

KRITISCH 9.9CVE-2021-43779 · Published 05/01/2022 · updated 17/06/2026

Kurz gesagt

CVE-2021-43779 ist eine Schwachstelle (KRITISCH (CVSS 9.9)) in addressing (teclib-edition).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 9.1%, höher als bei 95.3% aller Schwachstellen.
Abhilfe: auf 2.9.1 oder neuer aktualisieren.

Package	Affected versions	Patched versions
addressing teclib-edition	`< 2.9.1`	`2.9.1`

Description

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.

References

hansmach1ne/MyExploits · Exploit
pluginsGLPI/addressing commit 6f55964 · Patch
pluginsGLPI/addressing security advisory · Exploit
hansmach1ne/CVE-portfolio

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free