CVE-2022-0819 — Code Injection in Dolibarr

CWE-94 — Code Injection5 documents4 sources
Severity
8.8HIGHNVD
EPSS
1.7%
top 17.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Dolibarr DolibarrDolibarr ERP CRMDolibarr
Timeline
PublishedMar 2
Latest updateMar 3

Description

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶Packagistdolibarr/dolibarr< 15.0.1
▶CVEListV5dolibarr/dolibarr_dolibarrunspecified — 15.0.1

Patches

Patch: github.com ↗Patch: huntr.dev ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
Code injection in dolibarr/dolibarr↗2022-03-03
▶
GHSA
Code injection in dolibarr/dolibarr↗2022-03-03
▶
OSV
CVE-2022-0819: Code Injection in GitHub repository dolibarr/dolibarr prior to 15↗2022-03-02
▶
CVEList
Code Injection in dolibarr/dolibarr↗2022-03-02
▶
CVE-2022-0819 — Code Injection in Dolibarr Dolibarr | cvebase