Skip to content
OpenAdvisories
High · 8.3 CVE-2022-0224 BIT-dolibarr-2022-0224EUVD-2022-0624GHSA-j545-frh3-r9gq

SQL Injection in dolibarr/dolibarr

Published Jan 14, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

Affected products

VendorProductAffectedFixed
dolibarr dolibarr/dolibarr unspecified – < 14.0.6 14.0.6

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS dolibarr No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist dolibarr/dolibarr <= 14.0.5 — GHSA-j545-frh3-r9gq

References