CVE-2024-29477

—

CVSS 3.1

8.8 high

EPSS

<1%p55

Published

Apr 3, 2024 (Apr 3, 2024)

Modified

Jul 9, 2026

Description

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.

Vendors: dolibarr
Products: dolibarr erp\/crm
Weakness: CWE-94
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.