cve/2021/CVE-2021-43778.md

CVE-2021-43778

Description

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete the front/send.php file.

POC

Reference

• https://github.com/hansmach1ne/MyExploits/tree/main/Path%20Traversal%20in%20GLPI%20Barcode%20plugin

Github

• https://github.com/20142995/Goby
• https://github.com/AK-blank/CVE-2021-43778
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Feals-404/GLPIAnarchy
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/ZWDeJun/ZWDeJun
• https://github.com/d-rn/vulBox
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC