Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-17898

Опубликовано: 27 дек. 2017
Источник: ubuntu
Приоритет: medium
CVSS2: 5
CVSS3: 7.5

Описание

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

needed

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/focal

DNE

focal

DNE

Показывать по

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
около 8 лет назад

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

CVSS3: 7.5
debian
около 8 лет назад

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl ...

CVSS3: 7.5
github
больше 3 лет назад

Dolibarr sensitive information disclosure

5 Medium

CVSS2

7.5 High

CVSS3