Description

Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.

Remediation

References

CVE-2019-1010054

Related Vulnerabilities

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-14508)

WordPress Plugin Connections Business Directory Cross-Site Scripting (8.5.8)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.20)

WordPress Plugin JS MultiHotel Multiple Vulnerabilities (2.2.1)

PHP Other Vulnerability (CVE-2015-6838)

Severity

High

Classification

CVE-2019-1010054 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities