Em resumo
- CVE-2020-35136 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
- Chance de exploração nos próximos 30 dias (EPSS): 6.6%, maior que 93.9% das vulnerabilidades.
- Correção: atualize para 12.0.4 ou posterior.
Description
Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.
NVD description
Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.
Mais vulnerabilidades de dolibarr/dolibarr
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free