| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | < 11.0.5 | 11.0.5 |
| dolibarr | < 11.0.5 | 11.0.5 |
Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free