CVE-2019-14765

概要

参考情報

• gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305 · Third Party Advisory
• dimo-crm.fr/blog-crm · Vendor Advisory

yellowbox crm のその他の脆弱性

• CVE-2019-14768高 8.8An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new W…
• CVE-2019-14767高 7.5In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an una…
• CVE-2019-14766中 6.5Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.