Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-38887

Опубликовано: 20 сент. 2023
Источник: debian
EPSS Низкий

Описание

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
dolibarrremovedpackage

EPSS

Процентиль: 86%
0.03022
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 2 лет назад

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

CVSS3: 8.8
nvd
больше 2 лет назад

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

CVSS3: 8.8
github
больше 2 лет назад

File Upload vulnerability in Dolibarr ERP CRM

EPSS

Процентиль: 86%
0.03022
Низкий