Vulnerability GHSA-rvwr-q5hj-wq7g
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 5.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
6 months ago
May 03, 2026 at 12:30 PM UTC
Dolibarr has an Injection issue
3.6.0-beta - 15.0.3
3.6.0-beta - 15.0.3
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
9 days ago
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
3.6.0-beta - 15.0.3 GHSA-v5fq-cf5m-vwv7
3.6.0-beta - 15.0.3 GHSA-v5fq-cf5m-vwv7
Medium Risk
5 months ago
Dolibarr ERP CRM is vulnerable to Improper Authorization through its Leave Request REST API
3.6.0-beta - 15.0.3 GHSA-7fg5-vc77-69fp
3.6.0-beta - 15.0.3 GHSA-7fg5-vc77-69fp
Critical
5 months ago
Dolibarr ERP CRM contains a remote code evaluation vulnerability
3.6.0-beta - 6.0.7 and 7.0.0 - 7.0.3 GHSA-hxmh-2xc4-c894
3.6.0-beta - 6.0.7 and 7.0.0 - 7.0.3 GHSA-hxmh-2xc4-c894
Low Risk
6 months ago
Dolibarr has Insufficient Verification of Data Authenticity
3.6.0-beta - 15.0.3 GHSA-jggh-5rmh-r6h5
3.6.0-beta - 15.0.3 GHSA-jggh-5rmh-r6h5
High Risk
6 months ago
Dolibarr Allows Code Injection through its Website Module
3.6.0-beta - 15.0.3 GHSA-676v-wh57-p375
3.6.0-beta - 15.0.3 GHSA-676v-wh57-p375
Impacted packages
Timeline
Published
6 months ago
May 03, 2026 at 12:30 PM UTC
Last Modified
5 months ago
May 11, 2026 at 04:41 PM UTC