CVE-2021-43779

CVE-2021-43779 is a critical authenticated Remote Code Execution (RCE) vulnerability affecting the GLPI addressing plugin in versions prior to 2.9.1. This flaw allows an authenticated attacker to execute arbitrary commands on the underlying operating system through command injection, impacting the confidentiality, integrity, and availability of the system. With a CVSS score of 9.9, it presents a low attack complexity and requires only low privileges for exploitation. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.