Vulnerabilidades en dolibarr

57 resultados
Análisis Vexday

Dolibarr apresenta 14 vulnerabilidades catalogadas, predominantemente de injeção XSS (CWE-79), mas nenhuma está sob exploração ativa em cenários conhecidos e nenhuma alcança nível crítico. O portfólio não registra novos achados nos últimos 90 dias, indicando risco estabilizado, embora a natureza das falhas (XSS) exija atenção contínua em ambientes com exposição web.

CVE-2022-0174MEDIUMImproper Validation of Specified Quantity in Input in dolibarr/dolibarrEPSS 0.9%CVE-2021-25954MEDIUMImproper Access Control in “Dolibarr”EPSS 0.7%CVE-2024-5314CRITICALMultiple vulnerabilities in DOLIBARR's ERP CMSEPSS 0.6%CVE-2024-23817HIGHDolibarr Application Home Page HTML injection vulnerabilityEPSS 0.6%CVE-2023-4198MEDIUMDolibarr ERP CRM (<= 17.0.3) Improper Access ControlEPSS 0.6%CVE-2023-5842MEDIUMCross-site Scripting (XSS) - Stored in dolibarr/dolibarrEPSS 0.5%CVE-2023-5323MEDIUMCross-site Scripting (XSS) - Generic in dolibarr/dolibarrEPSS 0.4%CVE-2019-25452HIGHDolibarr ERP/CRM 10.0.1 SQL Injection via elemidEPSS 0.4%CVE-2026-81730HIGHDolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment FilenameEPSS 0.4%CVE-2026-89013HIGHDolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.phpEPSS 0.4%CVE-2026-58376HIGHDolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List EndpointsEPSS 0.4%CVE-2021-47779HIGHDolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege EscalationEPSS 0.4%CVE-2026-89012HIGHDolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters ParameterEPSS 0.3%CVE-2021-3991MEDIUMImproper Authorization in dolibarr/dolibarrEPSS 0.3%CVE-2019-25450HIGHDolibarr ERP/CRM 10.0.1 SQL Injection via card.phpEPSS 0.3%CVE-2019-25710HIGHDolibarr ERP-CRM 8.0.4 SQL Injection via rowid ParameterEPSS 0.3%CVE-2026-71506HIGHDolibarr < 24.0.0 Payments REST API Improper Authorization via Delete EndpointEPSS 0.3%CVE-2026-78160MEDIUMDolibarr ERP User Notes note.php authorizationEPSS 0.3%CVE-2020-36966MEDIUMDolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site ScriptingEPSS 0.3%CVE-2026-10215MEDIUMDolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorizationEPSS 0.3%