Lucene search

K
osvGoogleOSV:GHSA-JM38-VMGP-J7RX
HistoryMay 14, 2022 - 3:51 a.m.

Dolibarr sensitive information disclosure

2022-05-1403:51:58
Google
osv.dev
16
dolibarr erp/crm version 6.0.4
sensitive information disclosure
remote attackers
software

AI Score

7

Confidence

Low

EPSS

0.004

Percentile

73.0%

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

AI Score

7

Confidence

Low

EPSS

0.004

Percentile

73.0%

Related for OSV:GHSA-JM38-VMGP-J7RX