CVE-2020-13240

{"id": "CVE-2020-13240", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2020-05-20T15:15:11.187", "references": [{"url": "https://www.dubget.com/stored-xss-via-file-upload.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.dubget.com/stored-xss-via-file-upload.html", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-276"}, {"lang": "en", "value": "CWE-668"}]}], "descriptions": [{"lang": "en", "value": "The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS."}, {"lang": "es", "value": "El m\u00f3dulo DMS/ECM en Dolibarr versi\u00f3n 11.0.4, permite a usuarios con el permiso \"Setup documents directories\" renombrar archivos cargados para tener extensiones de archivo no seguras. Esto omite el mecanismo de protecci\u00f3n de .noexe contra el ataque de tipo XSS."}], "lastModified": "2024-11-21T05:00:51.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:11.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC605256-5C39-453C-B095-4CC11A8783FA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}