Dolibarr ERP and CRM Code Injection (CVE-2022-0819)

A code injection vulnerability exists in the Dolibarr ERP/CRM package. The vulnerability is due to insufficient input validation on user provided data...

CVE-2022-0819

CVE-2022-0819 affects dolibarr/dolibarr prior to 15.0.1. The issue is a code injection vulnerability arising from insufficient input validation in the Dolibarr codebase, with documented vectors related to unsafe handling (e.g., the dol_eval path). Impact is described as code execution risk; remed...