CVE-2021-43778

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete the `front/send.php` file.

• CWE-22

• https://github.com/hansmach1ne/MyExploits/tree/main/Path%20Traversal%20in%20GLPI%20Barcode%20pluginExploit, Third Party Advisory
• https://github.com/pluginsGLPI/barcode/commit/428c3d9adfb446e8492b1c2b7affb3d34072ff46Patch, Third Party Advisory
• https://github.com/pluginsGLPI/barcode/releases/tag/2.6.1Release Notes, Third Party Advisory
• https://github.com/pluginsGLPI/barcode/security/advisories/GHSA-2pjh-h828-wcw9Patch, Third Party Advisory
• https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2021-43778
• https://github.com/hansmach1ne/MyExploits/tree/main/Path%20Traversal%20in%20GLPI%20Barcode%20pluginExploit, Third Party Advisory
• https://github.com/pluginsGLPI/barcode/commit/428c3d9adfb446e8492b1c2b7affb3d34072ff46Patch, Third Party Advisory
• https://github.com/pluginsGLPI/barcode/releases/tag/2.6.1Release Notes, Third Party Advisory
• https://github.com/pluginsGLPI/barcode/security/advisories/GHSA-2pjh-h828-wcw9Patch, Third Party Advisory

Published

Nov 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43771Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnera…7.8
• CVE-2021-43772Trend Micro Security 2021 v17.0 (Consumer) contains a vulner…5.5
• CVE-2021-43774A risky-algorithm issue was discovered on Fujifilm DocuCentr…4.9
• CVE-2021-43775Aim is an open-source, self-hosted machine learning experime…8.6
• CVE-2021-43776Backstage is an open platform for building developer portals…6.1
• CVE-2021-43777Redash is a package for data visualization and sharing. In R…6.1
• CVE-2021-43779GLPI is an open source IT Asset Management, issue tracking s…9.9
• CVE-2021-4378The WP Quick FrontEnd Editor plugin for WordPress is vulnera…5.4
• CVE-2021-43780Redash is a package for data visualization and sharing. In v…8.8
• CVE-2021-43781Invenio-Drafts-Resources is a submission/deposit module for …4.3
• CVE-2021-43782Tuleap is a Libre and Open Source tool for end to end tracea…7.2
• CVE-2021-43783@backstage/plugin-scaffolder-backend is the backend for the …8.5