Packagist/dolibarr/dolibarr CVE-2017-8879: medium 6.8, EPSS 0.44%
Dolibarr allows password changes without supplying the current password
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-5x4j-xcmv-v3q2
- https://nvd.nist.gov/vuln/detail/CVE-2017-8879
- https://github.com/Dolibarr/dolibarr
- https://www.foxmole.com/advisories/foxmole-2017-02-23.txt
CVE-2017-8879 · published · modified · JSON