CVE-2024-29477

2024-04-0312:15:13

[email protected]

web.nvd.nist.gov

dolibarr erp

crm

installation

sanitization

network access

arbitrary code

vulnerability

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.

References

dolibarr.com

github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md