CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2020-13240
Severity
MEDIUM
CVSS
5.4
EPSS
0.70%
Original NVD Description
The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.
Related CVEs
Other vulnerabilities affecting the same vendor(s)