Candidate: CVE-2013-2093 PublicDate: 2019-11-20 21:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2093 Description: Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands. Ubuntu-Description: Notes: Mitigation: Bugs: Priority: untriaged Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_dolibarr: upstream_dolibarr: released (3.3.4-1) precise/esm_dolibarr: DNE trusty_dolibarr: ignored (out of standard support) trusty/esm_dolibarr: DNE xenial_dolibarr: not-affected (3.5.8+dfsg1-1ubuntu1) bionic_dolibarr: DNE focal_dolibarr: DNE groovy_dolibarr: DNE devel_dolibarr: DNE