GHSA-p7r8-7w87-8g46
Dolibarr arbitrary file upload vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | dolibarr/dolibarr | < 19.0.2 | 19.0.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.
References
External links from the advisory. They lead to third-party sites.