CVE-2021-43779

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.

• CWE-20
• CWE-78

• https://github.com/hansmach1ne/MyExploits/tree/main/RCE_GLPI_addressing_pluginExploit, Third Party Advisory
• https://github.com/pluginsGLPI/addressing/commit/6f55964803054a5acb5feda92c7c7f1d91ab5366Patch, Third Party Advisory
• https://github.com/pluginsGLPI/addressing/security/advisories/GHSA-q5fp-xpr8-77jhExploit, Third Party Advisory
• https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2021-43779
• https://github.com/hansmach1ne/MyExploits/tree/main/RCE_GLPI_addressing_pluginExploit, Third Party Advisory
• https://github.com/pluginsGLPI/addressing/commit/6f55964803054a5acb5feda92c7c7f1d91ab5366Patch, Third Party Advisory
• https://github.com/pluginsGLPI/addressing/security/advisories/GHSA-q5fp-xpr8-77jhExploit, Third Party Advisory

Published

Jan 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43772Trend Micro Security 2021 v17.0 (Consumer) contains a vulner…5.5
• CVE-2021-43774A risky-algorithm issue was discovered on Fujifilm DocuCentr…4.9
• CVE-2021-43775Aim is an open-source, self-hosted machine learning experime…8.6
• CVE-2021-43776Backstage is an open platform for building developer portals…6.1
• CVE-2021-43777Redash is a package for data visualization and sharing. In R…6.1
• CVE-2021-43778Barcode is a GLPI plugin for printing barcodes and QR codes.…7.5
• CVE-2021-4378The WP Quick FrontEnd Editor plugin for WordPress is vulnera…5.4
• CVE-2021-43780Redash is a package for data visualization and sharing. In v…8.8
• CVE-2021-43781Invenio-Drafts-Resources is a submission/deposit module for …4.3
• CVE-2021-43782Tuleap is a Libre and Open Source tool for end to end tracea…7.2
• CVE-2021-43783@backstage/plugin-scaffolder-backend is the backend for the …8.5
• CVE-2021-43784runc is a CLI tool for spawning and running containers on Li…5