CVE-2019-14767

概要

参考情報

• gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305 · Third Party Advisory
• dimo-crm.fr/blog-crm · Vendor Advisory
• elysium-security.com/sitemap.php · Not Applicable

yellowbox crm のその他の脆弱性

• CVE-2019-14768高 8.8An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new W…
• CVE-2019-14766中 6.5Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.
• CVE-2019-14765高 8.8Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use adminis…