CVE-2020-12669

Fixed upstream EPSS 2%

core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter.

Published 2020-05-06 · CVE record · OSV

Products: dolibarr

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	12.0.0

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix