Security Advisory

CVE-2020-14201

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-21 18:30:46
Last updated 2024-08-04 12:39:36
Assigner mitre
State PUBLISHED

Description

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.