Lucene search
+L

8 matches found

OSV
OSV
•added 2023/09/20 3:30 a.m.•114 views

GHSA-G8H7-MCP6-PF47 File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS8.8AI score0.01533EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/09/20 3:30 a.m.•36 views

File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS7.5AI score0.01533EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/09/20 1:15 a.m.•41 views

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS8.8AI score0.01533EPSS
SaveExploits1References1
OSV
OSV
•added 2023/09/20 1:15 a.m.•42 views

UBUNTU-CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS6.2AI score0.01533EPSS
SaveExploits1References4
Prion
Prion
•added 2023/09/20 1:15 a.m.•22 views

Unrestricted file upload

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

6.5CVSS8.8AI score0.01533EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/20 12:00 a.m.•0 views

CVE-2023-38887: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS8.2AI score0.01533EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/09/20 12:00 a.m.•55 views

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

9AI score0.01533EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/09/19 12:00 a.m.•11 views

PT-2023-26667 · Unknown · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions 17.0.1 and earlier Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions. Recommendations: For versions 17.0.1 a...

8.8CVSS7.9AI score0.01533EPSS
SaveExploits1References13
Rows per page
Query Builder