UpHeron
All vulnerabilities

Servers and applications

CVE-2019-15062

An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element (containing a user/card.php CSRF request) in his Linked Files settings page. When visited by the admin, this could completely take over the admin account. (The protection mechanism for CSRF is to check the Referer header; however, because the attack is from one of the application's own settings pages, this…

Severity
High 8.0
Published
14 Aug 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.6% in the next 30 daysHigher than 49% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Dolibarr ERP CRMServers and applications · cpe:a:dolibarr:dolibarr_erp\/crm
  • Version 11.0.0-alpha

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-15062
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-15062