GHSA-cwgm-qw8v-hrrg

ghsaUSosv

Dolibarr ERP and CRM Unsafe File Upload Vulnerability

view advisory published 2022-05-17Licence: CC-BY-4.0

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-9840US	high8.8	1.46% (73rd)	—	2017-06-25
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable ap…

references

External citations — patches, advisories, analysis.

https://nvd.nist.gov/vuln/detail/CVE-2017-9840ADVISORY
https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-009WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan