漏洞描述
Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/AK-blank/CVE-2021-43778↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-43778↗github.comhttps://github.com/pluginsGLPI/barcode/security/advisories/GHSA-2pjh-h828-wcw9↗github.comhttps://github.com/pluginsGLPI/barcode/releases/tag/2.6.1↗github.comhttps://github.com/pluginsGLPI/barcode/commit/428c3d9adfb446e8492b1c2b7affb3d34072ff46↗