Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2024-29477 - Vulnerability Database

Dolibarr

Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2024-29477

High

Reference: CVE-2024-29477

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-29477

Title: Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability

Overview:

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.