Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.
[ { "events": [ { "introduced": "0" }, { "last_affected": "5.0.3" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9840.json"