CVE-2024-37821

2024-06-1800:00:00

mitre

github.com

arbitrary file upload

dolibarr erp crm

v19.0.1

sql file

execute arbitrary code

cve-2024-37821

AI Score

7.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dolibarr",
    "product": "dolibarr_erp\\/crm",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "v19.0.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]