CVE-2024-37821

Опубликовано: 18 июн. 2024

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.

Ссылки

http://dolibarr.com
Product
https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-37821.md
Third Party Advisory
http://dolibarr.com
Product
https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-37821.md
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*

Версия до 19.0.2 (исключая)

EPSS

Процентиль: 46%

0.00234

Низкий

8.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVE-2024-37821

CVSS3: 8.8

ubuntu

больше 1 года назад

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.

CVE-2024-37821

CVSS3: 8.8

debian

больше 1 года назад

An arbitrary file upload vulnerability in the Upload Template function ...

GHSA-p7r8-7w87-8g46

CVSS3: 8.8

github

больше 1 года назад

Dolibarr arbitrary file upload vulnerability

EPSS

Процентиль: 46%

0.00234

Низкий

8.8 High

CVSS3

Дефекты

CWE-94