En resumen
- CVE-2020-35136 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
- Probabilidad de explotación en los próximos 30 días (EPSS): 6.6%, mayor que el 93.9% de las vulnerabilidades.
- Solución: actualizar a 12.0.4 o posterior.
Description
Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.
NVD description
Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.
Más vulnerabilidades de dolibarr/dolibarr
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free