2 matches found
BIT-DOLIBARR-2020-13240
The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS...
5.5CVSS5.6AI score0.00701EPSS
SaveExploits1References2
UBUNTU-CVE-2020-13240
The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS...
5.4CVSS6.1AI score0.00701EPSS
SaveExploits1References3
20