pluginsGLPI addressing vulnerabilities

Latest pluginsGLPI addressing CVEs

Newest publication first

1. CVE-2024-53850 The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

   Published 2024-12-26

   High·CVSS 8.2 EPSS 0.53%

   The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name) in GLPI.

2. CVE-2021-43779 Remote Command Execution vulnerability

   Published 2022-01-05

   Critical·CVSS 9.9 EPSS 9.1%

   GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command inje...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.