CVE-2020-12669

core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu…

published May 6, 2020

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01955 · 80.1th percentile
Published
2020-05-06T18:30Z
EPSS history
Timeline
  • 06 MAY 18:30Z
    core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu…
    cvelistv5