Arbitrary File Upload Flaw in Dolibarr ERP CRM Software
CVE-2024-37821
Currently unrated
What is CVE-2024-37821?
An arbitrary file upload vulnerability exists in the Upload Template function of Dolibarr ERP CRM versions up to v19.0.1. This security flaw allows attackers to upload a specially crafted .SQL file, potentially leading to the execution of arbitrary code on the server. Exploiting this vulnerability can compromise sensitive data and disrupt the functionality of the application, emphasizing the need for immediate attention and remediation. Organizations using the affected versions should implement necessary security measures to mitigate risks associated with this vulnerability.