Description

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.

Remediation

References

CVE-2017-9840

Related Vulnerabilities

WordPress Plugin WP Easy Gallery Multiple Unspecified Vulnerabilities (2.7)

WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)

Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-34282)

Django Uncontrolled Resource Consumption Vulnerability (CVE-2021-45115)

WebLogic CVE-2024-20986 Vulnerability (CVE-2024-20986)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-434 CVE-2017-9840