CVE-2024-29477

2024-04-0300:00:00

mitre

www.cve.org

dolibarr erp crm

sanitization

installation process

network access

arbitrary code

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.

References

dolibarr.com

github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md