High severity · published Aug 14, 2019
CVE-2019-15062
An issue was discovered in Dolibarr 11.0.0-alpha
8.0
CVSS
0.6%
EPSS
No
On KEV
Description
An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element (containing a user/card.php CSRF request) in his Linked Files settings page. When visited by the admin, this could completely take over the admin account. (The protection mechanism for CSRF is to check the Referer header; however, because the attack is from one of the application's own settings pages, this mechanism is bypassed.)
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Dolibarr Erp/crm · Dolibarr
11.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-15062
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-15062
Exploit
https://gauravnarwani.com/publications/CVE-2019-15062/
Exploit
https://github.com/Dolibarr/dolibarr/issues/11671
More from Dolibarr Erp/crm
9.8
CVE-2018-25357
Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php
9.8
CVE-2022-4093
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information
9.8
CVE-2022-43138
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API
9.8
CVE-2022-40871
Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection
9.8
CVE-2022-0224
dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command