Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-38887
HistorySep 20, 2023 - 1:15 a.m.

Unrestricted file upload

2023-09-2001:15:00
PRIOn knowledge base
www.prio-n.com
3
file upload
vulnerability
dolibarr erp crm
remote code execution
sensitive information
extension filtering
renaming functions

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.0%

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

CPENameOperatorVersion
dolibarr_erp\\/crmle17.0.1

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.0%

Related for PRION:CVE-2023-38887