CVE-2017-9840
No fix known EPSS 1%
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.
Products: dolibarr
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| Packagist | dolibarr/dolibarr |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | dolibarr | no fix |