Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g8h7-mcp6-pf47

Опубликовано: 20 сент. 2023
Источник: github
Github: Прошло ревью
CVSS3: 8.8

Описание

File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

Пакеты

Наименование

dolibarr/dolibarr

composer
Затронутые версииВерсия исправления

< 17.0.1

17.0.1

EPSS

Процентиль: 86%
0.03022
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 2 лет назад

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

CVSS3: 8.8
nvd
больше 2 лет назад

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions.

CVSS3: 8.8
debian
больше 2 лет назад

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allo ...

EPSS

Процентиль: 86%
0.03022
Низкий

8.8 High

CVSS3

Дефекты

CWE-434