CVE-2019-14766

概要

参考情報

• gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305 · Third Party Advisory
• dimo-crm.fr/blog-crm · Vendor Advisory

yellowbox crm のその他の脆弱性

• CVE-2019-14768高 8.8An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new W…
• CVE-2019-14767高 7.5In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an una…
• CVE-2019-14765高 8.8Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use adminis…