CVE-2024-29477

8.8 highEPSS 0.8%

High (8.8) in dolibarr dolibarr erp\/crm. EPSS 0.8% chance of exploitation in the next 30 days.

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the network to execute arbitrary code via a specifically crafted input.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-04-03
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

dolibarr:dolibarr_erp\/crm

References

https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md
https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-29477.md

Check your stack JSON