Lucene search
K

7 matches found

OSV
OSV
added 2023/09/20 3:30 a.m.47 views

GHSA-G8H7-MCP6-PF47 File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS8.8AI score0.03022EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/09/20 3:30 a.m.20 views

File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS7.5AI score0.03022EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2023/09/20 1:15 a.m.7 views

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS8.8AI score0.03022EPSS
Exploits1References2
OSV
OSV
added 2023/09/20 1:15 a.m.0 views

UBUNTU-CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

8.8CVSS6.2AI score0.03022EPSS
Exploits1References4
Prion
Prion
added 2023/09/20 1:15 a.m.11 views

Unrestricted file upload

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

6.5CVSS8.8AI score0.03022EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/09/20 12:0 a.m.10 views

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

9AI score0.03022EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/09/19 12:0 a.m.2 views

PT-2023-26667 · Unknown · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions 17.0.1 and earlier Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions. Recommendations: For versions 17.0.1 a...

8.8CVSS7.9AI score0.03022EPSS
Exploits1References13
Rows per page
Query Builder