Lucene search

K
githubGitHub Advisory DatabaseGHSA-P7R8-7W87-8G46
HistoryJun 18, 2024 - 9:30 p.m.

Dolibarr arbitrary file upload vulnerability

2024-06-1821:30:36
CWE-434
GitHub Advisory Database
github.com
2
dolibarr
erp
crm
upload
vulnerability
arbitrary code
sql
file upload

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.

Affected configurations

Vulners
Node
dolibarrdolibarrRange<19.0.2
CPENameOperatorVersion
dolibarr/dolibarrlt19.0.2

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for GHSA-P7R8-7W87-8G46