Arbitrary File Upload

2020-08-2403:59:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

dolibarr

arbitrary file upload

html response code

storage privilege

software

EPSS

0.001

Percentile

35.1%

JSON

Dolibarr is vulnerable to arbitrary file upload. A user with read access privilege to the storage of files is able to perform unrestricted uploading of files once edited from “disabled” to “enabled” in the HTML response code in societe/document.php.