En resumen
- CVE-2023-4197 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
- Probabilidad de explotación en los próximos 30 días (EPSS): 35.9%, mayor que el 98.5% de las vulnerabilidades.
- Solución: actualizar a 18.0.2 o posterior.
Description
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.
NVD description
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.
Más vulnerabilidades de dolibarr/dolibarr
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free