Skip to content
OpenAdvisories

Vendor

pluginsGLPI

15 known vulnerabilities.

Products

fields 3 addressing 2 databaseinventory 2 sccm 1 order 1 mreporting 1 formcreator 1 datainjection 1 tag 1 escalade 1 barcode 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-23489 Public exploit

    Fields GLPI plugin vulnerable to RCE in dropdown generation

    Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.

    pluginsGLPI fields
  • Critical 9.1
    CVE-2021-43778 Public exploit EPSS 53%

    Path traversal in GLPI barcode plugin

    Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete…

    pluginsGLPI barcode