agentprime: dolibarr

agentprime: dolibarrEvery new CVE for dolibarr.https://agentprime.io/CVE-2026-116219: Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameterhttps://agentprime.io/advisories/CVE-2026-116219/https://agentprime.io/advisories/CVE-2026-116219/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 13:08:50 GMTCVECVE-2026-116218: Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type fieldhttps://agentprime.io/advisories/CVE-2026-116218/https://agentprime.io/advisories/CVE-2026-116218/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 13:08:49 GMTCVECVE-2026-112361: Dolibarr CSP document.php protection mechanismhttps://agentprime.io/advisories/CVE-2026-112361/https://agentprime.io/advisories/CVE-2026-112361/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 21:45:06 GMTCVECVE-2026-110874: Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()https://agentprime.io/advisories/CVE-2026-110874/https://agentprime.io/advisories/CVE-2026-110874/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:57:17 GMTCVECVE-2026-107706: Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.phphttps://agentprime.io/advisories/CVE-2026-107706/https://agentprime.io/advisories/CVE-2026-107706/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 19:51:13 GMTCVECVE-2026-89013: Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.phphttps://agentprime.io/advisories/CVE-2026-89013/https://agentprime.io/advisories/CVE-2026-89013/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 15:54:59 GMTCVECVE-2026-89012: Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameterhttps://agentprime.io/advisories/CVE-2026-89012/https://agentprime.io/advisories/CVE-2026-89012/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 15:49:17 GMTCVECVE-2026-85401: Dolibarr Legacy File Manager config.inc.php access controlhttps://agentprime.io/advisories/CVE-2026-85401/https://agentprime.io/advisories/CVE-2026-85401/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 02:45:11 GMTCVECVE-2026-82633: Dolibarr 10.0.0 before 24.0.0 Missing Authorization on REST Users Groups Endpointhttps://agentprime.io/advisories/CVE-2026-82633/https://agentprime.io/advisories/CVE-2026-82633/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 30 Aug 2026 12:34:51 GMTCVECVE-2026-81730: Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filenamehttps://agentprime.io/advisories/CVE-2026-81730/https://agentprime.io/advisories/CVE-2026-81730/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 20:07:34 GMTCVECVE-2026-81729: Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletionhttps://agentprime.io/advisories/CVE-2026-81729/https://agentprime.io/advisories/CVE-2026-81729/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 20:07:34 GMTCVECVE-2026-81728: Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keyshttps://agentprime.io/advisories/CVE-2026-81728/https://agentprime.io/advisories/CVE-2026-81728/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 20:07:33 GMTCVECVE-2026-77923: Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clonetasks Mass Actionhttps://agentprime.io/advisories/CVE-2026-77923/https://agentprime.io/advisories/CVE-2026-77923/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:23:28 GMTCVECVE-2026-71511: Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpointshttps://agentprime.io/advisories/CVE-2026-71511/https://agentprime.io/advisories/CVE-2026-71511/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:06:35 GMTCVECVE-2026-71510: Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameterhttps://agentprime.io/advisories/CVE-2026-71510/https://agentprime.io/advisories/CVE-2026-71510/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:05:39 GMTCVECVE-2026-71509: Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpointhttps://agentprime.io/advisories/CVE-2026-71509/https://agentprime.io/advisories/CVE-2026-71509/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:04:52 GMTCVECVE-2026-71508: Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpointhttps://agentprime.io/advisories/CVE-2026-71508/https://agentprime.io/advisories/CVE-2026-71508/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:03:59 GMTCVECVE-2026-71507: Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routeshttps://agentprime.io/advisories/CVE-2026-71507/https://agentprime.io/advisories/CVE-2026-71507/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:03:01 GMTCVECVE-2026-71506: Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpointhttps://agentprime.io/advisories/CVE-2026-71506/https://agentprime.io/advisories/CVE-2026-71506/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:01:47 GMTCVECVE-2026-71505: Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write Routehttps://agentprime.io/advisories/CVE-2026-71505/https://agentprime.io/advisories/CVE-2026-71505/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 19:00:47 GMTCVECVE-2026-71504: Dolibarr < 24.0.0 Members REST API Improper Authorization via Password Resethttps://agentprime.io/advisories/CVE-2026-71504/https://agentprime.io/advisories/CVE-2026-71504/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 18:57:47 GMTCVECVE-2026-71503: Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Templatehttps://agentprime.io/advisories/CVE-2026-71503/https://agentprime.io/advisories/CVE-2026-71503/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 18:57:05 GMTCVECVE-2026-77686: Dolibarr Account card.php improper authorizationhttps://agentprime.io/advisories/CVE-2026-77686/https://agentprime.io/advisories/CVE-2026-77686/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 11:00:13 GMTCVECVE-2026-19930: Dolibarr User Cloning card.php ldap injectionhttps://agentprime.io/advisories/CVE-2026-19930/https://agentprime.io/advisories/CVE-2026-19930/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 03:15:09 GMTCVECVE-2026-58376: Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpointshttps://agentprime.io/advisories/CVE-2026-58376/https://agentprime.io/advisories/CVE-2026-58376/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 15:59:10 GMTCVECVE-2025-67486: Dolibarr has an Authenticated Remote Code Execution via eval() injection in user extrafieldshttps://agentprime.io/advisories/CVE-2025-67486/https://agentprime.io/advisories/CVE-2025-67486/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 14:21:55 GMTCVECVE-2020-36966: Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2020-36966/https://agentprime.io/advisories/CVE-2020-36966/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Jan 2026 16:16:37 GMTCVECVE-2013-2093: dolibarr: Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and…https://agentprime.io/advisories/CVE-2013-2093/https://agentprime.io/advisories/CVE-2013-2093/Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2019 20:13:17 GMTCVECVE-2013-2092: dolibarr: Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject…https://agentprime.io/advisories/CVE-2013-2092/https://agentprime.io/advisories/CVE-2013-2092/Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2019 20:09:11 GMTCVECVE-2013-2091: dolibarr: SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute…https://agentprime.io/advisories/CVE-2013-2091/https://agentprime.io/advisories/CVE-2013-2091/Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2019 19:52:37 GMTCVE