dolibarr/dolibarr Security Advisories for 3.7.0 (51)
-
[HIGH] Dolibarr vulnerable to Cross-Site Request Forgery
PKSA-8w8y-vz41-dcws CVE-2024-31503 GHSA-6ppg-rgrg-f573
Affected version: <=19.0.0
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP CRM Code Injection vulnerability during installation
PKSA-2sjx-71hq-ptft CVE-2024-29477 GHSA-p73x-rpgm-3v56
Affected version: <=19.0.0
Reported by:
GitHub -
[MEDIUM] Dolibarr Improper Input Validation vulnerability
PKSA-r9vt-swsb-3xhm CVE-2023-4198 GHSA-48v2-596x-4jr9
Affected version: <18.0.0
Reported by:
GitHub -
[HIGH] Dolibarr Improper Input Validation vulnerability
PKSA-q6zm-sspk-cc66 CVE-2023-4197 GHSA-r9cm-pw9j-3fpx
Affected version: <18.0.2
Reported by:
GitHub -
[MEDIUM] Cross-site Scripting (XSS) in dolibarr/dolibarr
PKSA-zjx2-p78q-wn3y CVE-2023-5842 GHSA-9pjf-jw9q-fx49
Affected version: <16.0.5
Reported by:
GitHub -
[MEDIUM] Dolibarr Cross-site Scripting vulnerability
PKSA-5n9n-kh2g-xmcr CVE-2023-5323 GHSA-39m3-cj8c-886r
Affected version: <18.0.0
Reported by:
GitHub -
[CRITICAL] Cross Site Scripting vulnerability in Dolibarr ERP CRM
PKSA-88m8-v3s6-zj4m CVE-2023-38888 GHSA-62wf-h26v-5m57
Affected version: <17.0.1
Reported by:
GitHub -
[HIGH] File Upload vulnerability in Dolibarr ERP CRM
PKSA-z8ry-v62w-xzbn CVE-2023-38887 GHSA-g8h7-mcp6-pf47
Affected version: <17.0.1
Reported by:
GitHub -
[HIGH] Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
PKSA-bjh3-pcty-gzfv CVE-2023-38886 GHSA-6773-rfjv-c54w
Affected version: <17.0.1
Reported by:
GitHub -
[HIGH] Dolibarr vulnerable to remote code execution via uppercase manipulation
PKSA-vjp5-yqyb-hsw9 CVE-2023-30253 GHSA-9wqr-5jp4-mjmh
Affected version: <17.0.1
Reported by:
GitHub -
[CRITICAL] Dolibarr vulnerable to privilege escalation
PKSA-v57c-2m1y-xvmj CVE-2022-43138 GHSA-gh7m-j673-wm97
Affected version: <14.0.1
Reported by:
GitHub -
[CRITICAL] Dolibarr vulnerable to Eval Injection
PKSA-mbfz-b6r1-yyjp CVE-2022-40871 GHSA-7cm4-vmf2-8wf2
Affected version: <=15.0.3
Reported by:
GitHub -
[MEDIUM] Cross site scripting in dolibarr
PKSA-nbwd-xphp-dm3x CVE-2022-2060 GHSA-8fvr-7945-mg7w
Affected version: <16.0
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-9v1x-ktqz-f9tf CVE-2021-33618 GHSA-fc6h-769x-gff5
Affected version: <=13.0.2
Reported by:
GitHub -
[MEDIUM] Dolibarr CRM allows Privilege Escalation
PKSA-s6hs-f6t3-qf3p CVE-2020-14201 GHSA-25h3-mw3p-w8r7
Affected version: <11.0.5
Reported by:
GitHub -
[HIGH] Dolibarr Cross-Site Request Forgery Vulnerability
PKSA-w2cr-77jy-3g26 CVE-2020-11825 GHSA-m66x-wm27-xxpc
Affected version: <=10.0.6
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-g6v4-vq1v-p32t CVE-2019-19211 GHSA-gfhf-2xr5-2fvw
Affected version: <10.0.3
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-c5xb-z1bt-9jfy CVE-2019-19210 GHSA-87r3-4gc8-f897
Affected version: <10.0.3
Reported by:
GitHub -
[HIGH] Dolibarr ERP and CRM SQLi
PKSA-nx8v-n677-wc1v CVE-2019-19209 GHSA-jh3j-xfv2-f9m9
Affected version: <10.0.3
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-fhb8-mj38-9kqm CVE-2020-9016 GHSA-jh69-6vv2-wfp5
Affected version: <=11.0.0
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-rny5-1t19-1dr3 CVE-2019-19206 GHSA-f6h3-66xr-hqr2
Affected version: <=10.0.3
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM HTML Injection
PKSA-61zb-92w5-rzs3 CVE-2019-17223 GHSA-3264-65pg-5xm4
Affected version: <11.0.1
Reported by:
GitHub -
[HIGH] Dolibarr ERP and CRM malicious executable loading
PKSA-n8dc-7zky-4fhn CVE-2019-11200 GHSA-2rwh-262r-r85j
Affected version: <9.0.3
Reported by:
GitHub -
[HIGH] Dolibarr ERP and CRM Code Injection
PKSA-qtxz-zm3f-h177 CVE-2019-11201 GHSA-jwg3-v9xm-v6q9
Affected version: <=9.0.1
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerabilities
PKSA-xwpw-9pvj-cbzb CVE-2016-1912 GHSA-jh5p-wpg2-8rgv
Affected version: <=3.8.3
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-24nf-b1mt-jb72 CVE-2017-7887 GHSA-x2fq-gq6c-hp44
Affected version: <=4.0.4
Reported by:
GitHub -
[CRITICAL] Dolibarr ERP and CRM Insecure Encryption
PKSA-zrzn-23vb-jyzq CVE-2017-7888 GHSA-98vc-98q7-57qf
Affected version: <=4.0.4
Reported by:
GitHub -
[CRITICAL] Dolibarr ERP and CRM SQLi
PKSA-bpt3-29fv-69j8 CVE-2017-9435 GHSA-v3m8-7h3p-6j5m
Affected version: <5.0.3
Reported by:
GitHub -
[HIGH] Dolibarr ERP and CRM Unsafe File Upload Vulnerability
PKSA-g6m9-dzp4-8qsq CVE-2017-9840 GHSA-cwgm-qw8v-hrrg
Affected version: <=5.0.3
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-z5k9-fsvp-dz7q CVE-2017-14241 GHSA-h3vg-4x76-v28w
Affected version: <6.0.1
Reported by:
GitHub -
[HIGH] Dolibarr ERP and CRM Sensitive Data Disclosure
PKSA-whm7-xjwq-kb2d CVE-2017-14240 GHSA-p9wf-x8h5-44fr
Affected version: <=6.0.0
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-x93f-p2m2-s25d CVE-2017-17971 GHSA-qjq9-wx5j-jrg6
Affected version: <=6.0.4
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-c9k9-bv9h-nfrd CVE-2017-1000509 GHSA-hqfh-p9h7-m6v5
Affected version: <7.0.0
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-rws6-d3z4-1xs3 CVE-2017-18259 GHSA-4323-cfj5-98mh
Affected version: <=7.0.0
Reported by:
GitHub -
[MEDIUM] Dolibarr ERP and CRM contain XSS Vulnerability
PKSA-42j8-qz4b-r131 CVE-2018-19799 GHSA-ggww-q2gv-m3g4
Affected version: <=8.0.3
Reported by:
GitHub -
[HIGH] SQL Injection in Dolibarr
PKSA-7hyc-8p7w-tx2z CVE-2021-36625 GHSA-vrgp-3ph6-2wwq
Affected version: <14.0.0
Reported by:
GitHub -
[HIGH] Access Control vulnerability in Dolibarr
PKSA-9gqb-jpxc-hzdt CVE-2021-37517 GHSA-xw7v-qrhc-jjg2
Affected version: <14.0.1
Reported by:
GitHub -
[HIGH] Code injection in dolibarr/dolibarr
PKSA-c6vz-7ss1-46ss CVE-2022-0819 GHSA-42qm-c3cf-9wv2
Affected version: <15.0.1
Reported by:
GitHub -
[MEDIUM] Logic error in dolibarr/dolibarr
PKSA-n91r-qpfg-6986 CVE-2022-0746 GHSA-8vq6-5f66-hp3r
Affected version: <16.0
Reported by:
GitHub -
[MEDIUM] Improper Authorization in dolibarr/dolibarr
PKSA-grdq-s436-n3jz CVE-2022-0731 GHSA-4xc7-x2jr-cr74
Affected version: <16.0
Reported by:
GitHub -
[MEDIUM] Dolibarr vulnerable to Improper Validation of Specified Quantity in Input
PKSA-8bmy-9syy-8jvn CVE-2022-0414 GHSA-f768-8pvq-mm6r
Affected version: <=14.0.5
Reported by:
GitHub -
[HIGH] SQL Injection in dolibarr
PKSA-w8dx-f6mj-mt46 CVE-2022-0224 GHSA-j545-frh3-r9gq
Affected version: <=14.0.5
Reported by:
GitHub -
[MEDIUM] Logic error in dolibarr
PKSA-sc5b-g3wj-xw57 CVE-2022-0174 GHSA-8qvx-f5gf-g43v
Affected version: <15.0.0
Reported by:
GitHub -
[MEDIUM] Cross site scripting in dolibarr
PKSA-rk5y-hr58-nmpr CVE-2022-22293 GHSA-g5jm-xhwm-9xp9
Affected version: <13.0.0
Reported by:
GitHub -
[HIGH] Dolibarr vulnerable to Improper Authentication and Improper Access Control
PKSA-9kfk-35mx-vktx CVE-2021-25956 GHSA-fjqg-w8g6-hhq8
Affected version: >=3.3.beta1,<13.0.2
Reported by:
GitHub -
[HIGH] Weak Password Recovery Mechanism for Forgotten Password
PKSA-kb2t-w5sd-kvm6 CVE-2021-25957 GHSA-c32w-3cqh-f6jx
Affected version: <14.0.0
Reported by:
GitHub -
[CRITICAL] Dolibarr Cross-site Scripting vulnerability
PKSA-31hb-rcq2-13kf CVE-2021-25955 GHSA-cpv8-6xgr-rmf6
Affected version: >=2.8.1,<=13.0.2
Reported by:
GitHub -
[MEDIUM] Improper Access Control in Dolibarr
PKSA-kgzg-v22n-v1h7 CVE-2021-25954 GHSA-vxhc-c4qm-647p
Affected version: >=2.8.1,<14.0.0
Reported by:
GitHub -
[MEDIUM] XSS in Dolibarr
PKSA-jr5s-c522-x3zt CVE-2020-13094 GHSA-cxvr-r92m-q9hw
Affected version: <11.0.4
Reported by:
GitHub -
[MEDIUM] XSS in Dolibarr ERP & CRM
PKSA-wmff-7dtj-r9g8 CVE-2020-7996 GHSA-v384-jqmq-fc74
Affected version: <=10.0.6
Reported by:
GitHub -
[MEDIUM] Cross-site scripting in Dolibarr
PKSA-j76p-td9c-253d CVE-2019-16197 GHSA-m553-9wmx-533h
Affected version: <10.0.2
Reported by:
GitHub