Lucene search

K
osvGoogleOSV:CVE-2020-13240
HistoryMay 20, 2020 - 3:15 p.m.

CVE-2020-13240

2020-05-2015:15:11
Google
osv.dev
2

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

24.8%

The DMS/ECM module in Dolibarr 11.0.4 allows users with the ‘Setup documents directories’ permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

24.8%

Related for OSV:CVE-2020-13240