China National Vulnerability DatabaseCNVD-2022-86335Dolibarr SQL Injection Vulnerability
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Dolibarr is an application. that can help you manage your organization’s activities. dolibarr_erp/crm versions 16.0.1, 16.0.2 contain a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements. An attacker could exploit this vulnerability to obtain sensitive database information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr dolibarr_erp/crm | eq | 16.0.1 | |
| dolibarr dolibarr_erp/crm | eq | 16.0.2 |
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H