CVE-2024-29477

2024-04-0312:15:13

[email protected]

web.nvd.nist.gov

lack of sanitization

arbitrary code execution

network access

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.

References

dolibarr.com

github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md