Skip to content
OpenAdvisories

Vendor

pluginsGLPI

15 known vulnerabilities.

Products

fields 3 addressing 2 databaseinventory 2 sccm 1 order 1 mreporting 1 formcreator 1 datainjection 1 tag 1 escalade 1 barcode 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-23489 Public exploit

    Fields GLPI plugin vulnerable to RCE in dropdown generation

    Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.

    pluginsGLPI fields
  • Critical 9.9
    CVE-2021-43779

    Remote Command Execution vulnerability

    GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating syst…

    pluginsGLPI addressing
  • Critical 9.1
    CVE-2021-43778 Public exploit EPSS 52%

    Path traversal in GLPI barcode plugin

    Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete…

    pluginsGLPI barcode