CVE-2024-29477: Code Injection
Published Apr 3, 2024
·Updated
Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.
Affected Software
2 affected components
dolibarr Dolibarr Erp\/crm<19.0.1
composer/dolibarr/dolibarr<=19.0.0
Event History
Apr 3, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·12:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-29477?
CVE-2024-29477 has a high severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2024-29477?
To fix CVE-2024-29477, upgrade Dolibarr ERP CRM to version 19.0.1 or later.
3
Who is affected by CVE-2024-29477?
CVE-2024-29477 affects users of Dolibarr ERP CRM versions up to 19.0.0.
4
Can CVE-2024-29477 be exploited remotely?
CVE-2024-29477 requires adjacent network access for exploitation.
5
What kind of vulnerability is CVE-2024-29477?
CVE-2024-29477 is a lack of sanitization vulnerability during the installation process.