CVE-2022-0414 — Improper Validation of Specified Quantity in Input in Dolibarr

CWE-1284 — Improper Validation of Specified Quantity in Input5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 44.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Dolibarr DolibarrDolibarr ERP CRMDolibarr
Timeline
PublishedJan 31
Latest updateFeb 1

Description

Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶Packagistdolibarr/dolibarr< 15.0
▶CVEListV5dolibarr/dolibarr_dolibarrunspecified — 16.0

Patches

Patch: github.com ↗Patch: huntr.dev ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
Dolibarr vulnerable to Improper Validation of Specified Quantity in Input↗2022-02-01
▶
OSV
Dolibarr vulnerable to Improper Validation of Specified Quantity in Input↗2022-02-01
▶
CVEList
Improper Validation of Specified Quantity in Input in dolibarr/dolibarr↗2022-01-31
▶
OSV
CVE-2022-0414: Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16↗2022-01-31
▶
CVE-2022-0414 — Dolibarr Dolibarr vulnerability | cvebase