Skip to content
OpenAdvisories

Vendor

Dolibarr

65 known vulnerabilities.

Products

dolibarr 35 dolibarr/dolibarr 11 Dolibarr ERP/CRM 8 ERP CRM 6 ERP CMS 2 ERP 2 CRM 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-89013 Public exploit Scanner template

    Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php

    Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints by supplying a crafted hashp parameter value. Attackers can send a request with h…

    Dolibarr dolibarr
  • High 7.2
    CVE-2026-22666 Public exploit EPSS 16%

    Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()

    Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidden string checks in whitelist mode and does not detect PHP dynamic callable syntax. Attackers…

    Dolibarr Dolibarr ERP/CRM dolibarr Ubuntu
  • High 7.5
    CVE-2023-4197 Public exploit EPSS 36%

    Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

    Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.

    Dolibarr Dolibarr ERP/CRM dolibarr dolibarr/dolibarr Ubuntu Packagist