CVE-2019-14766

Mô tả

Tham khảo

• gist.github.com/sm0k/5de26614282669b0bcfa719b87c17305 · Third Party Advisory
• dimo-crm.fr/blog-crm · Vendor Advisory

Lỗ hổng khác của yellowbox crm

• CVE-2019-14768CAO 8.8An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new W…
• CVE-2019-14767CAO 7.5In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an una…
• CVE-2019-14765CAO 8.8Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use adminis…