Lucene search

K
osvGoogleOSV:GHSA-25H3-MW3P-W8R7
HistoryMay 24, 2022 - 5:26 p.m.

Dolibarr CRM allows Privilege Escalation

2022-05-2417:26:18
Google
osv.dev
10
dolibarr crm
privilege escalation
file upload

EPSS

0.001

Percentile

35.1%

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which “disabled” is changed to “enabled” in the HTML source code.

EPSS

0.001

Percentile

35.1%

Related for OSV:GHSA-25H3-MW3P-W8R7