Vulnerabilidades em dolibarr

57 resultados
Análise Vexday

Dolibarr apresenta 14 vulnerabilidades catalogadas, predominantemente de injeção XSS (CWE-79), mas nenhuma está sob exploração ativa em cenários conhecidos e nenhuma alcança nível crítico. O portfólio não registra novos achados nos últimos 90 dias, indicando risco estabilizado, embora a natureza das falhas (XSS) exija atenção contínua em ambientes com exposição web.

CVE-2026-71504HIGHDolibarr < 24.0.0 Members REST API Improper Authorization via Password ResetEPSS 0.3%CVE-2026-81728HIGHDolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update KeysEPSS 0.3%CVE-2026-71509HIGHDolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update EndpointEPSS 0.2%CVE-2026-71511HIGHDolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member EndpointsEPSS 0.2%CVE-2026-71505HIGHDolibarr < 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write RouteEPSS 0.2%CVE-2026-71510HIGHDolibarr < 24.0.0 Users REST API SQL Injection via filter parameterEPSS 0.2%CVE-2026-10154MEDIUMDolibarr ERP CRM messaging.php authorizationEPSS 0.2%CVE-2026-7688LOWDolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injectionEPSS 0.2%CVE-2026-71507HIGHDolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account RoutesEPSS 0.2%CVE-2026-71508HIGHDolibarr < 24.0.0 REST API Improper Authorization via User Update EndpointEPSS 0.2%CVE-2026-81729HIGHDolibarr before 23.0.4 Incorrect Authorization on REST API Document DeletionEPSS 0.2%CVE-2026-82633MEDIUMDolibarr 10.0.0 before 24.0.0 Missing Authorization on REST Users Groups EndpointEPSS 0.2%CVE-2026-71503MEDIUMDolibarr < 24.0.0 Reflected XSS via Extra Fields Administration TemplateEPSS 0.2%CVE-2026-19350MEDIUMDolibarr ERP TakePOS invoice.php fail authorizationEPSS 0.2%CVE-2026-11619MEDIUMDolibarr ERP CRM Legacy Filemanager config.inc.php improper authorizationEPSS 0.2%CVE-2026-77923MEDIUMDolibarr 21.0.0 < 24.0.0 Authorization Bypass via clonetasks Mass ActionEPSS 0.2%CVE-2026-7689MEDIUMDolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verificationEPSS 0.1%