Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47632
HistoryJun 19, 2024 - 6:36 a.m.

Arbitrary Code Execution

2024-06-1906:36:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
arbitrary code execution
validation
file upload
sql file
security flaw

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

dolibarr/dolibarr is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper validation of file types in the Upload Template function, allowing attackers to execute arbitrary code via uploading a crafted .SQL file.

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for VERACODE:47632