CVE-2021-43779

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jan 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-43785.4The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.5 due to CVE-2021-437808.8Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading data sources like JSONCVE-2021-437814.3Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-ResouCVE-2021-437827.2Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a follow up to GHSA-887w-CVE-2021-437838.5@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a malicious actor witCVE-2021-437845.0runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as aCVE-2021-437856.1@joeattardi/emoji-button is a Vanilla JavaScript emoji picker component. In affected versions there are two vectors for XSS attacks: a URL fCVE-2021-437867.5Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verification step unintentiCVE-2021-437876.1Nodebb is an open source Node.js based forum software. In affected versions a prototype pollution vulnerability in the uploader module allowCVE-2021-437885.0Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to acCVE-2021-437899.8PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection usingCVE-2021-43796.5The WooCommerce Multi Currency plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wmc_bulk_
CVE-2021-43779: Critical severity, CVSS 9.9 | Vulnix