Lucene search
K

17 matches found

Veracode
Veracode
added 2025/11/20 11:5 a.m.3 views

Remote Code Execution (RCE)

Dolibarr is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of the computed field parameter in the User module configuration, which allows an attacker to inject malicious input and execute arbitrary code...

8.8CVSS7.6AI score0.00218EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-32047

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00218EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/10/02 12:17 a.m.2 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS8.5AI score0.00218EPSS
Exploits0References1
OSV
OSV
added 2025/10/01 9:31 p.m.1 views

GHSA-27HJ-48R9-X2VX Dolibarr vulnerable to RCE via the computed field parameter

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS8.5AI score0.00218EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2025/10/01 9:31 p.m.4 views

Dolibarr vulnerable to RCE via the computed field parameter

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS8.5AI score0.00218EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2025/10/01 8:18 p.m.2 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS0.00218EPSS
Exploits0References2
OSV
OSV
added 2025/10/01 8:18 p.m.1 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS8.5AI score
Exploits0References2
OSV
OSV
added 2025/10/01 8:18 p.m.0 views

UBUNTU-CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.8CVSS6.4AI score0.00218EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/01 12:0 a.m.1 views

Dolibarr ERP & CRM 安全漏洞

Dolibarr ERP & CRM is an enterprise management software from Dolibarr Open Source. A security vulnerability exists in Dolibarr ERP & CRM version 21.0.1 due to a remote code execution vulnerability in the computed field parameter of the User module configuration...

8.8CVSS7.6AI score0.00218EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/01 12:0 a.m.2 views

CVE-2025-56588

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field parameter...

8.1AI score0.00218EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/01 12:0 a.m.2 views

PT-2025-40295

Name of the Vulnerable Software and Affected Versions Dolibarr ERP & CRM version 21.0.1 Description The software contains a remote code execution RCE issue within the User module configuration. This is due to a flaw in the computed field parameter. Recommendations At the moment, there is no...

8.8CVSS7.6AI score0.00218EPSS
Exploits0References12
OSV
OSV
added 2024/07/24 9:31 p.m.7 views

GHSA-VPRP-94P9-5JP8 Dolibarr ERP CRM vulnerable to remote code execution (RCE)

Dolibarr ERP CRM before 19.0.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

7CVSS6AI score0.0048EPSS
Exploits0References3
NVD
NVD
added 2024/07/24 7:15 p.m.10 views

CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

5.5CVSS0.0048EPSS
Exploits0References1
OSV
OSV
added 2024/07/24 7:15 p.m.0 views

UBUNTU-CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

5.5CVSS6.4AI score0.0048EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/07/24 7:15 p.m.10 views

CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

5.5CVSS6.1AI score0.0048EPSS
Exploits0References2
CVE
CVE
added 2024/07/24 12:0 a.m.44 views

CVE-2024-40137

Dolibarr ERP/CRM versions before 19.0.2-php8.2 contain a remote code execution (RCE) vulnerability exposed through the Computed field parameter in the Users Module Setup function. The issue is documented across multiple feeds (CVE-2024-40137) and is reported as affecting Dolibarr; proof of exploi...

5.5CVSS8.4AI score0.0048EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/24 12:0 a.m.12 views

CVE-2024-40137

Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...

0.0048EPSS
Exploits0References1
Rows per page
Query Builder