Lucene search

K
osvGoogleOSV:CVE-2020-14201
HistoryAug 21, 2020 - 7:15 p.m.

CVE-2020-14201

2020-08-2119:15:12
Google
osv.dev
7
dolibarr
crm
privilege escalation
file upload

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

35.1%

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which “disabled” is changed to “enabled” in the HTML source code.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

35.1%