Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-14201
6.5
MEDIUMCVSS v3
Published
August 21, 2020
CVSS v2
4 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.
Dolibarr/dolibarr
GitHubDolibarr ERP CRM is a modern software package to manage your company or foundation's activity (contacts, suppliers, invoices, orders, stocks, agenda, accounting, ...). it's an open source Web application (written in PHP) designed for businesses of any sizes, foundations and freelancers.
GitHubDolibarr ERP CRM is a modern software package to manage your company or foundation's activity (contacts, suppliers, invoices, orders, stocks, agenda, accounting, ...). it's an open source Web application (written in PHP) designed for businesses of any sizes, foundations and freelancers.< 11.0.5NVD
