Опубликовано: 31 мар. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5
Описание
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
| Релиз | Статус | Примечание |
|---|---|---|
| esm-apps/xenial | needed | |
| trusty | ignored | end of standard support |
| upstream | needs-triage | |
| xenial | ignored | end of standard support |
Показывать по
10
EPSS
Процентиль: 56%
0.00338
Низкий
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
больше 3 лет назад
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
CVSS3: 7.5
debian
больше 3 лет назад
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fix ...
EPSS
Процентиль: 56%
0.00338
Низкий
5 Medium
CVSS2
7.5 High
CVSS3