Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who indicates that exploitation can only occur if an unprivileged user knows the token of an admin user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dolibarr ERP & CRM 安全漏洞
Vulnerability Description
Dolibarr ERP & CRM是Dolibarr开源的一个企业管理软件。 Dolibarr ERP & CRM 22.0.9版本存在安全漏洞，该漏洞源于perms.php中的notes字段存在跨站请求伪造，可能导致远程攻击者权限提升。
CVSS Information
N/A
Vulnerability Type
N/A