Vulnerability Report

CVE-2021-43779

RCE

Title: Teclib-Edition Addressing RCE

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2021-43779.

CWE Category CWE-78
Published Date Jan 05, 2022
Modified Date Sep 08, 2025
Exploit Status Not Found
Score 9.9 CVSS v3.1
Exploit Probability (EPSS)
9.13%

Vulnerability Summary

CVE-2021-43779: GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.

Impacted Vendors

T
teclib-edition 1

Reference Links

https://github.com/hansmach1ne/MyExploits/tree/main/RCE_GLPI_addressing_plugin https://github.com/pluginsGLPI/addressing/commit/6f55964803054a5acb5feda92c7c7f1d91ab5366 https://github.com/pluginsGLPI/addressing/security/advisories/GHSA-q5fp-xpr8-77jh https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2021-43779 https://github.com/hansmach1ne/MyExploits/tree/main/RCE_GLPI_addressing_plugin https://github.com/pluginsGLPI/addressing/commit/6f55964803054a5acb5feda92c7c7f1d91ab5366 https://github.com/pluginsGLPI/addressing/security/advisories/GHSA-q5fp-xpr8-77jh
CVSS v3.1
Source Entity [email protected]
Severity CRITICAL
9.9
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
CHANGED
RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
CVSS v3.1
Source Entity [email protected]
Severity CRITICAL
9.9
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
CHANGED
RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0
Source Entity [email protected]
Severity HIGH
9.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:S/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2021-43779 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK
Complexity LOW
Privileges N/A
Interaction NONE
CVSS Vector String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Affected Stack

No specific products linked.