Lucene search

Veracode Vulnerability DatabaseVERACODE:46205

HistoryApr 04, 2024 - 7:11 a.m.

Arbitrary Code Execution

2024-04-0407:11:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

dolibarr

vulnerability

arbitrary code execution

installation

attacker

network access

crafted input

software

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

dolibarr/dolibarr is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient sanitization during the installation process, enabling an attacker with adjacent network access to execute arbitrary code by providing specially crafted input.

CPENameOperatorVersion
dolibarr/dolibarrle15.0.3
dolibarr/dolibarrle15.0.3

CPE	Name	Operator	Version
	dolibarr/dolibarr	le	15.0.3
	dolibarr/dolibarr	le	15.0.3

References

dolibarr.com

github.com/advisories/GHSA-p73x-rpgm-3v56

github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md