Approved changes feed: RSS · Atom

cpe:2.3:a:pluginsglpi:addressing:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPluginsglpi (06299ce7-7c01-5e27-80d2-610e38d2f6b3)
ProductAddressing (4766f595-2317-5ab1-a614-eccdf591f36f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-53850 vulnerable 2026-06-08 06:54:15.630061 The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
HIGH (8.2)
The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name) in GLPI.
Published: 2024-12-26T21:41:55.270Z
Updated: 2024-12-27T16:18:41.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43779 vulnerable 2026-06-08 05:36:44.243497 Remote Command Execution vulnerability
CRITICAL (9.9)
GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.
Published: 2022-01-05T18:45:11.000Z
Updated: 2025-09-08T15:33:16.901Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.