CPE Details
Dolibarr ERP CRM 18.0.6
18.0.6
2024-12-02
18h24 +00:00
18h24 +00:00
2024-12-02
18h24 +00:00
18h24 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:dolibarr:dolibarr_erp\/crm:18.0.6:*:*:*:*:*:*:*
Informations
Vendor
dolibarrProduct
dolibarr_erp\/crmVersion
18.0.6Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions. | 4.3 |
Moyen |
||
| An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file. | 8.8 |
Haute |
||
| Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover. | 7.5 |
Haute |
||
| Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input. | 8.8 |
Haute |
