CVE-2021-43778 — Path traversal in GLPI barcode plugin
Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path travers…
Published: 2021-11-24 · CVSS: 9.1 · CVSS 3.1
Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete the `front/send.php` file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7