Critical severity9.9NVD Advisory· Published Jan 5, 2022· Updated Jun 17, 2026
CVE-2021-43779
CVE-2021-43779
Description
GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <2.9.1
- pluginsGLPI/addressingv5Range: < 2.9.1
Patches
Vulnerability mechanics
References
4- github.com/pluginsGLPI/addressing/commit/6f55964803054a5acb5feda92c7c7f1d91ab5366nvdPatchThird Party Advisory
- github.com/hansmach1ne/MyExploits/tree/main/RCE_GLPI_addressing_pluginnvdExploitThird Party Advisory
- github.com/pluginsGLPI/addressing/security/advisories/GHSA-q5fp-xpr8-77jhnvdExploitThird Party Advisory
- github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2021-43779nvd
News mentions
0No linked articles in our index yet.