{"cvss":9.1,"datePublished":"2022-05-31T00:00:00Z","dateUpdated":"2022-05-31T00:00:00Z","description":"Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. This issue was patched in version 2.6.1. As a workaround, delete the `front/send.php` file.","dueDate":"","id":"CVE-2021-43778","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"barcode","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"glpi-project barcode Improper Limitation of a Pathname to a Restricted Directory","vendor":"glpi-project"}