Skip to content

Latest commit

 

History

History
32 lines (19 loc) · 985 Bytes

CVE-2024-29477.md

File metadata and controls

32 lines (19 loc) · 985 Bytes

Public Security Advisory: CVE-2024-29477

CVSS Score

  • Base Score: 8.4 (High)
  • Vector: CVSS:3.1/AV:A/PR:H/S:C/I:H/AC:L/UI:N/C:H/A:H

Affected Product

The issue was found on Dolibarr ERP/CRM

Affected Versions

  • Dolibarr ERP/CRM up to 19.0.0
  • Fixed in version 19.0.1

CVE ID

CVE-2024-29477

Description

A security vulnerability has been identified in Dolibarr ERP/CRM, affecting versions up to 19.0.0. This vulnerability allows an attacker to inject arbitrary code into the application due to insufficient sanitization of input during the Dolibarr ERP/CRM installation process.

Impact

An attacker could exploit this vulnerability to execute arbitrary code on the target system, potentially leading to a partial or full compromise of the system.

Vulnerability Type

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Researcher

Joao A. C. Buschinelli