Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25h3-mw3p-w8r7

Опубликовано: 24 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Dolibarr CRM allows Privilege Escalation

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.

Пакеты

Наименование

dolibarr/dolibarr

composer
Затронутые версииВерсия исправления

< 11.0.5

11.0.5

EPSS

Процентиль: 36%
0.0015
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 5 лет назад

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.

CVSS3: 6.5
nvd
почти 5 лет назад

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.

CVSS3: 6.5
debian
почти 5 лет назад

Dolibarr CRM before 11.0.5 allows privilege escalation. This could all ...

EPSS

Процентиль: 36%
0.0015
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269