Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7cm4-vmf2-8wf2

Опубликовано: 12 окт. 2022
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

Dolibarr vulnerable to Eval Injection

Dolibarr ERP & CRM <=15.0.3 are vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval.

Пакеты

Наименование

dolibarr/dolibarr

composer
Затронутые версииВерсия исправления

<= 15.0.3

Отсутствует

EPSS

Процентиль: 98%
0.51559
Средний

9.8 Critical

CVSS3

Дефекты

CWE-94
CWE-95

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 3 лет назад

Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval.

CVSS3: 9.8
nvd
больше 3 лет назад

Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval.

CVSS3: 9.8
debian
больше 3 лет назад

Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By defaul ...

EPSS

Процентиль: 98%
0.51559
Средний

9.8 Critical

CVSS3

Дефекты

CWE-94
CWE-95